Static task
static1
Behavioral task
behavioral1
Sample
5461e8caf8e6556f59d06c88fe61822f41861c1a9ccb397ded0c8e766b91a5bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5461e8caf8e6556f59d06c88fe61822f41861c1a9ccb397ded0c8e766b91a5bc.exe
Resource
win10v2004-20220812-en
General
-
Target
5461e8caf8e6556f59d06c88fe61822f41861c1a9ccb397ded0c8e766b91a5bc
-
Size
100KB
-
MD5
92373481c5b83dac54366540a4b83ef0
-
SHA1
da4c2ecb5d5cb376220a16b5eb301fde8df14fa3
-
SHA256
5461e8caf8e6556f59d06c88fe61822f41861c1a9ccb397ded0c8e766b91a5bc
-
SHA512
c5c9c363f1cbeb38e686d4833267ccbcb31e022db1253beba3cf30b474c73b09d9fb568c09920885026c8ef01b1331d1847532b2ccdd591827bbb7e977dbd86a
-
SSDEEP
3072:SI4CWAU4jOKu8d6N5FCfjM9SDADeak7dJHB/AdGh:SRWZjOKuxN5YfjSSsQLH5Adg
Malware Config
Signatures
Files
-
5461e8caf8e6556f59d06c88fe61822f41861c1a9ccb397ded0c8e766b91a5bc.exe windows x86
55a44d8ca82033c8b859a55faf1fd62e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80u
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord3397
ord5210
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1393
ord3940
ord1608
ord1611
ord5911
ord6721
ord4535
ord3677
ord566
ord757
ord3824
ord1049
ord5971
ord2011
ord3327
ord4475
ord2832
ord2534
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord3902
ord293
ord577
ord280
ord5406
ord461
ord3901
ord354
ord605
ord1058
ord1079
ord1785
ord3635
ord3599
ord4574
ord4119
ord6086
ord4112
ord501
ord709
ord4743
ord287
ord2460
ord5398
ord4347
ord774
ord283
ord1894
ord3176
ord4256
ord1590
ord5199
ord1392
ord5908
ord6720
ord1542
ord1661
ord1662
ord4884
ord4729
ord4206
ord5178
ord1198
ord2640
ord2527
ord2985
ord3712
ord3713
ord3703
ord2638
ord3943
ord4480
ord4255
ord3590
ord760
ord572
ord762
ord1605
ord5562
ord764
msvcr80
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__setusermatherr
_configthreadlocale
_initterm_e
_unlock
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
memcpy
_CxxThrowException
__CxxFrameHandler3
_wcstoui64
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_initterm
_adjust_fdiv
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memset
kernel32
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
InterlockedExchange
Sleep
user32
IsWindow
KillTimer
PostQuitMessage
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
SendMessageW
LoadIconW
EnableWindow
comctl32
InitCommonControlsEx
oleaut32
VarBstrCmp
SysFreeString
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ