Static task
static1
Behavioral task
behavioral1
Sample
57dba0e4f5ac49af98ef388ae49a35ce4d2981cf79232539001c43b97d495d94.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
57dba0e4f5ac49af98ef388ae49a35ce4d2981cf79232539001c43b97d495d94.exe
Resource
win10v2004-20220812-en
General
-
Target
57dba0e4f5ac49af98ef388ae49a35ce4d2981cf79232539001c43b97d495d94
-
Size
793KB
-
MD5
0c4caa0ebb0dea8e9f68f8759da74404
-
SHA1
88c1e68754316cbd6c7e2dc4e704460de86c834d
-
SHA256
57dba0e4f5ac49af98ef388ae49a35ce4d2981cf79232539001c43b97d495d94
-
SHA512
56cdc53a759b9754219c59ad8e76ee8316b30ce83352f378a2fe21aaf95e5c8279f762e47012a1a2f6b02a17591f0423fb5a7a9d087550fd9e1d2ea3d01212e4
-
SSDEEP
12288:zE+xoLkLlshKjTYzEVFicyXVyPv4ZIhnJZy8hpPxMHbuOesYSd3y8D5isDrhDNT:A+xvlshKj08QIPJxvfa7jPYS08FiI
Malware Config
Signatures
Files
-
57dba0e4f5ac49af98ef388ae49a35ce4d2981cf79232539001c43b97d495d94.exe windows x86
7e1ff3d135e6ff2b7e15062802864a9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkW
CreateSemaphoreA
SetEvent
GetTickCount
CloseHandle
WriteConsoleA
LoadLibraryA
GetProcessHeap
Sleep
VirtualProtectEx
SetLastError
lstrlenA
HeapSize
GetStartupInfoA
SetLastError
CreateDirectoryW
DeleteFileW
GlobalFree
CreateMutexA
GetFileAttributesA
GetLocalTime
cryptui
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
w32topl
ToplEdgeInit
ToplEdgeDestroy
ToplEdgeCreate
ToplEdgeFree
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE