Static task
static1
Behavioral task
behavioral1
Sample
52aef4c0230ce03e2e9d61425ba8430d4ae13da217c2d05dfb254b0f99d629b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52aef4c0230ce03e2e9d61425ba8430d4ae13da217c2d05dfb254b0f99d629b0.exe
Resource
win10v2004-20220812-en
General
-
Target
52aef4c0230ce03e2e9d61425ba8430d4ae13da217c2d05dfb254b0f99d629b0
-
Size
1.2MB
-
MD5
934d7ed23a7fc7b19adb1a797b76d770
-
SHA1
7e3638728de741d45efc50debd093b33625e5627
-
SHA256
52aef4c0230ce03e2e9d61425ba8430d4ae13da217c2d05dfb254b0f99d629b0
-
SHA512
d54fe85434770e5cbf018d0a12b0b620bfb52bc4aa0809dca6f3883a0c8d9c2229d7f7d4e9d5324dda5ef122a2d8d07c3a07d8a01126678cba679176da903e0d
-
SSDEEP
24576:nDHsykr7MhoKW/kGjjG7btB6lGogmMap/er:nD9cDN/kqjG7paA
Malware Config
Signatures
Files
-
52aef4c0230ce03e2e9d61425ba8430d4ae13da217c2d05dfb254b0f99d629b0.exe windows x86
4da534297a7f3fab2a433e59e1c623d9
Code Sign
ab:8b:d8:6e:5c:e3:5b:69:6a:03:29:8a:7f:99:03:93:47:b3:a9:efSigner
Actual PE Digestab:8b:d8:6e:5c:e3:5b:69:6a:03:29:8a:7f:99:03:93:47:b3:a9:efDigest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualAllocEx
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
FreeConsole
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
GetProcAddress
HeapSize
GetProcessHeap
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryExW
LockResource
InterlockedDecrement
HeapFree
InitializeCriticalSectionAndSpinCount
FreeLibrary
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FatalAppExitA
IsDebuggerPresent
Sleep
IsProcessorFeaturePresent
CreateSemaphoreW
GetModuleHandleW
lstrlenA
WideCharToMultiByte
LocalFree
lstrlenW
GetCommandLineW
EncodePointer
DecodePointer
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
LoadIconW
LoadCursorW
EndPaint
BeginPaint
UpdateWindow
MessageBoxW
LoadStringW
LoadAcceleratorsW
EndDialog
DialogBoxParamW
ShowWindow
TranslateAcceleratorW
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
DestroyWindow
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ole32
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
shell32
ShellExecuteW
oleaut32
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SetErrorInfo
VariantChangeType
VariantInit
VariantClear
SysAllocString
GetErrorInfo
CreateErrorInfo
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 999KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ