Static task
static1
Behavioral task
behavioral1
Sample
5c48584d027917ab9dc34d9bd4d601c6dd8de068aa4604b30d5f4a25713cfcd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c48584d027917ab9dc34d9bd4d601c6dd8de068aa4604b30d5f4a25713cfcd0.exe
Resource
win10v2004-20220812-en
General
-
Target
5c48584d027917ab9dc34d9bd4d601c6dd8de068aa4604b30d5f4a25713cfcd0
-
Size
683KB
-
MD5
a2a433157551314084433a7bbe1963b1
-
SHA1
83db2dfc51d0e01b96e955541464d6a359d420d6
-
SHA256
5c48584d027917ab9dc34d9bd4d601c6dd8de068aa4604b30d5f4a25713cfcd0
-
SHA512
b217f9fe3b017014d8391d171b2f2b5290b445a166ac300c3aed4eed2d9019595a0dc5f55ea71dc1cca1ca95db9ef3d0b353956f1c94c867ff65cafb2c4e17ff
-
SSDEEP
12288:3V6qzIYcYNl6mAQVOAJ7qEqwDfPEDgSXNZUS43R++JLaU2LlnMvK/nSj9T:3sqsLYeZAJ7qEqwTPEfgSCNUlMvPT
Malware Config
Signatures
Files
-
5c48584d027917ab9dc34d9bd4d601c6dd8de068aa4604b30d5f4a25713cfcd0.exe windows x86
62fdd955c80dc7a2039f052aedf0c785
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
SizeofResource
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalLock
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetProcessHeap
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
FreeEnvironmentStringsW
lstrcatA
GetCurrentProcess
DeleteCriticalSection
GetFileAttributesW
HeapDestroy
FindNextFileA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
HeapAlloc
ExitProcess
GetModuleHandleA
GetCurrentProcessId
GetVersion
GetLastError
GetTickCount
GetCurrentThread
GetCommandLineA
QueryPerformanceCounter
GetCurrentThreadId
gdi32
DeleteObject
DeleteDC
SetTextColor
SetBkMode
SetBkColor
ole32
CoInitialize
CoTaskMemFree
user32
DrawTextA
SendMessageA
wsprintfA
IsWindowVisible
GetSysColor
MessageBoxA
MoveWindow
GetFocus
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
CreateWindowExA
GetSubMenu
SetWindowTextA
SetWindowLongA
ReleaseCapture
SetCapture
IsIconic
GetSystemMetrics
SetFocus
FillRect
SetTimer
GetWindowLongA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetKeyState
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
PostQuitMessage
SetForegroundWindow
SetCursor
GetClientRect
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 638KB - Virtual size: 961KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ