Static task
static1
Behavioral task
behavioral1
Sample
52683989e9c9fe01df6aa4fa85494304f95afab6b054639d1849f89b02b032df.exe
Resource
win7-20220812-en
General
-
Target
52683989e9c9fe01df6aa4fa85494304f95afab6b054639d1849f89b02b032df
-
Size
187KB
-
MD5
81abd39d1ff4daecefc1c0527fcd313d
-
SHA1
15b8d0d4d754e0c5c398ef83fc8d317cac59b03b
-
SHA256
52683989e9c9fe01df6aa4fa85494304f95afab6b054639d1849f89b02b032df
-
SHA512
5d68a7d8f5ec1a650c25f4a778babced58ddf03a08380476a0be6e4fb947707136291efdc36bbc63ac1698260ccf379bb2b61091c7f80672119745320a76788d
-
SSDEEP
3072:HSOFv4owzKtPXQfIwiT/H50Kn1ZLAce0989m+MKC3yurQmxs/dXO89qJ8prmiw:yWdygwaH5lbP9FpKC3yu7+RnQQmi
Malware Config
Signatures
Files
-
52683989e9c9fe01df6aa4fa85494304f95afab6b054639d1849f89b02b032df.exe windows x86
5cc424ae5b9856d84f5029caac46f38e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHGetValueW
PathRemoveFileSpecW
PathAppendW
PathCombineW
PathFileExistsW
winmm
timeEndPeriod
newdev
UpdateDriverForPlugAndPlayDevicesW
rpcrt4
NdrByteCountPointerFree
UuidCreate
kernel32
FlushInstructionCache
GlobalLock
GetVersionExW
SetLastError
GlobalAlloc
GlobalUnlock
WaitForSingleObject
CreateFileW
ExitProcess
TlsSetValue
GetCurrentThreadId
VirtualProtectEx
WriteProcessMemory
SetLocaleInfoW
GetThreadContext
GetLastError
GlobalFree
DuplicateHandle
GetCurrentProcess
GetTempPathW
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ