Static task
static1
Behavioral task
behavioral1
Sample
508987efeefcba87e8c7653c5a5b75ecf4cc23caaf7b9bc26d574e56a1db5160.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
508987efeefcba87e8c7653c5a5b75ecf4cc23caaf7b9bc26d574e56a1db5160.exe
Resource
win10v2004-20220812-en
General
-
Target
508987efeefcba87e8c7653c5a5b75ecf4cc23caaf7b9bc26d574e56a1db5160
-
Size
126KB
-
MD5
55a40a6343ad074b8befaded89b3d080
-
SHA1
8c9c4c5d19ca57b270d242e32f5aa87f6d3591a8
-
SHA256
508987efeefcba87e8c7653c5a5b75ecf4cc23caaf7b9bc26d574e56a1db5160
-
SHA512
b38da5258e0c6a38f4cea44b4c0deb334637eb21a2e2d00c20d1b4cbc1199de0267433dba08ce82ecd81a9b35164a56ed6b5985b7c6cd617f68acc7534c804fa
-
SSDEEP
3072:6IVt72Ks4pJngzQV2WWQyT2Dm9gztJhj:6IVti2Ae0Wh
Malware Config
Signatures
Files
-
508987efeefcba87e8c7653c5a5b75ecf4cc23caaf7b9bc26d574e56a1db5160.exe windows x86
9db85b58f1193567a2aa95c8fab29bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CopyFileA
ExitProcess
GetPrivateProfileIntA
GetModuleFileNameA
LocalFree
LocalAlloc
GetFileAttributesA
FindFirstFileA
GetACP
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetPrivateProfileSectionA
SetFileAttributesA
GetWindowsDirectoryA
GetSystemDirectoryA
WideCharToMultiByte
HeapFree
GetOEMCP
GetStringTypeA
GetCPInfo
WriteFile
lstrlenA
VirtualFree
MoveFileExA
GetProcessHeap
HeapAlloc
WritePrivateProfileSectionA
lstrcmpiA
GetVersionExA
lstrcpyA
lstrcatA
LoadLibraryA
VirtualAlloc
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapCreate
RtlUnwind
FreeEnvironmentStringsA
GetStringTypeW
MultiByteToWideChar
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
user32
ReleaseDC
wsprintfA
PostMessageA
GetDC
gdi32
GetFontData
DeleteObject
SelectObject
AddFontResourceA
EnumFontFamiliesExA
CreateFontIndirectA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
k֜Ck Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE