Static task
static1
Behavioral task
behavioral1
Sample
5288a89fc122e0b066b68cf72f28ef9bdeb81235f14ddd7f19eb105b4e1c1fc1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5288a89fc122e0b066b68cf72f28ef9bdeb81235f14ddd7f19eb105b4e1c1fc1.exe
Resource
win10v2004-20220812-en
General
-
Target
5288a89fc122e0b066b68cf72f28ef9bdeb81235f14ddd7f19eb105b4e1c1fc1
-
Size
410KB
-
MD5
84bacb3bf1867ec6446ba4dbc71d42be
-
SHA1
1f5541f9596d95f64ca50d90d495a705e0a66935
-
SHA256
5288a89fc122e0b066b68cf72f28ef9bdeb81235f14ddd7f19eb105b4e1c1fc1
-
SHA512
5d1ca5d15b68080d8649b1948d2df5e63ba3c79102aaaa389e419677e234e3f23aa7887e1fbabc9118bf05bd608db4c4d58d4de3734973dbdd21fcc7a0399a64
-
SSDEEP
12288:MC9F+DdfUzQbnZEU0sByNPPI26vkJGv0:HUVbtBc1K5v
Malware Config
Signatures
Files
-
5288a89fc122e0b066b68cf72f28ef9bdeb81235f14ddd7f19eb105b4e1c1fc1.exe windows x86
3f976ca28f0ce9572ec2dd46bfc2f082
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GetSystemDefaultLangID
HeapCreate
WaitForMultipleObjects
GetConsoleCP
WaitForSingleObject
CloseHandle
lstrlenA
SuspendThread
LocalSize
GetVersion
VirtualProtect
GetCommandLineA
GetTickCount
GetAtomNameA
GlobalUnlock
GetStdHandle
CompareFileTime
HeapReAlloc
InterlockedExchange
GetModuleHandleA
gdi32
CreateFontA
GetMetaFileA
GetFontData
GetStringBitmapA
EndPath
AbortPath
Ellipse
CreatePalette
FloodFill
GetMetaRgn
GetRgnBox
GdiFlush
DeleteDC
GetTextColor
DeleteObject
EqualRgn
CreateICA
BeginPath
EngLineTo
Escape
winmm
auxSetVolume
CloseDriver
OpenDriver
auxGetVolume
PlaySoundA
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ