Static task
static1
Behavioral task
behavioral1
Sample
051f68d2c6a8e811faec46e2563248e821143148e84b520820aa42c2958e5cfe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
051f68d2c6a8e811faec46e2563248e821143148e84b520820aa42c2958e5cfe.exe
Resource
win10v2004-20220812-en
General
-
Target
051f68d2c6a8e811faec46e2563248e821143148e84b520820aa42c2958e5cfe
-
Size
237KB
-
MD5
845417bc6472d9083bd5f72df527ca30
-
SHA1
8a9d44519d80fd672c1d5d63ce3def956160ef31
-
SHA256
051f68d2c6a8e811faec46e2563248e821143148e84b520820aa42c2958e5cfe
-
SHA512
4971a8a19ca752ca6ea0df2f23765ad4ac3e82ee849e8e90fb545d526950a9c420bc96abf532e06d52bd63c37b51cc57fcbb8b854406e4970213bfcb638aa319
-
SSDEEP
3072:ARXjDBVX92/j27T88Qq9BPNRRDXCuidy1u4s0ci4QI3qoYjN1nspZOwVSR45Em:AVjDXYSnX9Nvsg1J253ysnOwVM4Km
Malware Config
Signatures
Files
-
051f68d2c6a8e811faec46e2563248e821143148e84b520820aa42c2958e5cfe.exe windows x86
2b8bbb06ceb6a4e1cb6f29aaedaa00df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
GetTempFileNameA
MulDiv
GlobalUnfix
GetVersion
GetStringTypeExW
SetFileAttributesA
SearchPathW
GlobalCompact
GetStringTypeW
LCMapStringA
CreateMutexA
RtlZeroMemory
GlobalAddAtomA
WaitForDebugEvent
DeviceIoControl
GetDefaultCommConfigA
ReplaceFileW
GlobalFindAtomA
TlsGetValue
LocalAlloc
GetQueuedCompletionStatus
SwitchToThread
ExpandEnvironmentStringsW
CreateSemaphoreW
EnumResourceLanguagesA
IsBadStringPtrA
FindResourceExW
lstrcpyA
GetVersionExA
GetFileAttributesA
FreeUserPhysicalPages
user32
GetMenuState
DialogBoxIndirectParamA
SetMenuItemBitmaps
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kkcnkrv Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zufswuc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE