Static task
static1
Behavioral task
behavioral1
Sample
56e5a8968af5b8e4ae81b1697b57dcd05cd70c32c110cebd9cdf81d915b05f8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56e5a8968af5b8e4ae81b1697b57dcd05cd70c32c110cebd9cdf81d915b05f8f.exe
Resource
win10v2004-20220812-en
General
-
Target
56e5a8968af5b8e4ae81b1697b57dcd05cd70c32c110cebd9cdf81d915b05f8f
-
Size
209KB
-
MD5
927a58ac0ab62028707d830f1516e74e
-
SHA1
06c1f361ba8f0ea644ac9d71da323af95e6106a3
-
SHA256
56e5a8968af5b8e4ae81b1697b57dcd05cd70c32c110cebd9cdf81d915b05f8f
-
SHA512
d34ae9dab15f11bfb88ba8c42675edf59553c78ac8b070a612e8543736b635aa360f4ce691cee76243ae5c5e8ee031d7c903a84d493de96237fa89fbb8e61b04
-
SSDEEP
6144:g5xeYPH3+CBCRmhiko16YJSQ6G67erP2FQND19zU:geY60hs796dFQRrU
Malware Config
Signatures
Files
-
56e5a8968af5b8e4ae81b1697b57dcd05cd70c32c110cebd9cdf81d915b05f8f.exe windows x86
cd5c78100ee5b884d0aa4b32a69141cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
FindResourceA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocaleInfoA
HeapFree
QueryPerformanceCounter
HeapAlloc
SetUnhandledExceptionFilter
GetProcessHeap
LoadLibraryW
lstrcmpA
CloseHandle
GetTickCount
GetLocalTime
SystemTimeToFileTime
WideCharToMultiByte
CreateFileA
GetOEMCP
MultiByteToWideChar
SetLastError
GetCurrentProcess
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
scecli
SceAddToObjectList
SceBrowseDatabaseTable
SceCloseProfile
SceAppendSecurityProfileInfo
SceAnalyzeSystem
SceAddToNameStatusList
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ