Static task
static1
Behavioral task
behavioral1
Sample
5f249c027b32ef311741cd5b7a50dfd2a0bafd67594e297708c414b212faad0e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5f249c027b32ef311741cd5b7a50dfd2a0bafd67594e297708c414b212faad0e.exe
Resource
win10v2004-20220812-en
General
-
Target
5f249c027b32ef311741cd5b7a50dfd2a0bafd67594e297708c414b212faad0e
-
Size
297KB
-
MD5
01694a83929186b1fff80737be0306d6
-
SHA1
7180d9c6aeec808e46937b56939e786d29a04d69
-
SHA256
5f249c027b32ef311741cd5b7a50dfd2a0bafd67594e297708c414b212faad0e
-
SHA512
6781bda82eadc6f34144b53c576f6cbe3b20aa3829985d079f1ada2f2acfc14f29e77ac5b9dea678fd09e536f8c6b78205d4e5fc20067f24cd26e937014a5779
-
SSDEEP
6144:FBwFI8o/qDjuLJZGZ6p0SGM1hYiyCmeW4EL3oK5f6PETBHQZU:XwF2/qDjuzGZA0SfyCmetPE/
Malware Config
Signatures
Files
-
5f249c027b32ef311741cd5b7a50dfd2a0bafd67594e297708c414b212faad0e.exe windows x86
0bb762a2a2c40b158272c65d1d38a37e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleA
GetModuleHandleA
CloseHandle
IsProcessorFeaturePresent
HeapCreate
GetStringTypeW
LCMapStringW
OutputDebugStringW
OutputDebugStringA
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
SetFilePointer
MultiByteToWideChar
Sleep
GetCurrentProcess
WriteConsoleW
SetStdHandle
CreateFileW
HeapAlloc
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
DecodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
RaiseException
RtlUnwind
user32
RegisterClassA
GetMessageA
GetWindowTextLengthA
SendMessageA
GetDC
TranslateMessage
GetDlgItem
GetMenuStringA
CheckDlgButton
LoadAcceleratorsA
DispatchMessageA
LoadImageA
FindWindowA
GetDlgItemTextA
SetDlgItemTextA
comctl32
InitCommonControlsEx
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ