Static task
static1
Behavioral task
behavioral1
Sample
5c927b4440cb5a8042ba57d9942ad1c5fb8fcb97dcde1ae6bbc79e4e3bd68b90.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c927b4440cb5a8042ba57d9942ad1c5fb8fcb97dcde1ae6bbc79e4e3bd68b90.exe
Resource
win10v2004-20220812-en
General
-
Target
5c927b4440cb5a8042ba57d9942ad1c5fb8fcb97dcde1ae6bbc79e4e3bd68b90
-
Size
206KB
-
MD5
0f79a776d3dfd30ce09d7ef948740790
-
SHA1
5120ae97666e493acca952b3aaba62ef75727323
-
SHA256
5c927b4440cb5a8042ba57d9942ad1c5fb8fcb97dcde1ae6bbc79e4e3bd68b90
-
SHA512
f0deaa3c6694f1922b9adf0be2ec8b5ff4af45e4e8184105fce7b8a04a97bd9a13296e4f2bfb5d6ab3ab8f43ff65410583550451bceec26c0674fd3ffedc0757
-
SSDEEP
3072:tsWHgkXfkgHf2JsIWBmgGFHOL2hJl9LMirJ/8+cqgr7jr3+jZ9dJa4RmQtTx2c:DHgG3Hfh0w2/7RJ/8rq4WFnJTRmkx
Malware Config
Signatures
Files
-
5c927b4440cb5a8042ba57d9942ad1c5fb8fcb97dcde1ae6bbc79e4e3bd68b90.exe windows x86
2d26cc0d8d9cabd2e0f2c21598ba3618
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
SystemTimeToFileTime
WideCharToMultiByte
LockResource
GetVolumeInformationA
GetCurrentProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
CreateFileA
GetSystemTimeAsFileTime
GetTickCount
GetProcessHeap
MultiByteToWideChar
SetLastError
lstrcpyA
CloseHandle
GetLocalTime
HeapFree
GetOEMCP
GetLocaleInfoA
LoadLibraryW
FindResourceA
lstrlenA
HeapAlloc
IsValidLocale
lstrcmpA
scecli
SceAddToNameStatusList
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
schannel
QueryContextAttributesA
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW
advapi32
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ