Static task
static1
Behavioral task
behavioral1
Sample
5c9ce492f28f5fd5c9b7c26242886b9517d37b433b12d7f6a655cff9687a1a94.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c9ce492f28f5fd5c9b7c26242886b9517d37b433b12d7f6a655cff9687a1a94.exe
Resource
win10v2004-20220812-en
General
-
Target
5c9ce492f28f5fd5c9b7c26242886b9517d37b433b12d7f6a655cff9687a1a94
-
Size
146KB
-
MD5
0e4083283ab4576abb443cc961a63920
-
SHA1
826aa1aa7781dd54988267d905b270c4c08745a2
-
SHA256
5c9ce492f28f5fd5c9b7c26242886b9517d37b433b12d7f6a655cff9687a1a94
-
SHA512
28ff2e1fb767ff6a94e3c707318b073b590af407091638493f85f1e3bcf174496b7d79ed674ee70e8e17be3975f7c7be4b9fa6af75429396f9609a2074903fc2
-
SSDEEP
3072:qAZBEXh4J+uU5WZ9gJzQ8NFbmM0D5//NX+hSJtG2AyeOf4JeVqG:qcM4JbPvwzQ8NF6M0Dp/T1eA/
Malware Config
Signatures
Files
-
5c9ce492f28f5fd5c9b7c26242886b9517d37b433b12d7f6a655cff9687a1a94.exe windows x86
cec3efbecad0c8299e30aa8ae81e840c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnWire
GetProfileIntA
GetWindowsDirectoryA
GetTimeFormatA
ReadConsoleInputA
OpenWaitableTimerA
GetVersion
GetSystemDirectoryA
lstrlenA
GetDiskFreeSpaceA
WaitForDebugEvent
GetMailslotInfo
GetSystemTime
SetCommConfig
OpenJobObjectA
GetNumberOfConsoleInputEvents
ResumeThread
DeleteTimerQueueTimer
VirtualUnlock
VirtualAlloc
EnumResourceNamesA
GetLogicalDriveStringsA
SetVolumeLabelA
ReleaseSemaphore
SetDllDirectoryA
GetEnvironmentVariableA
FindNextVolumeMountPointA
ProcessIdToSessionId
PeekConsoleInputA
GetConsoleInputExeNameA
WriteConsoleInputA
GetThreadLocale
WritePrivateProfileStringA
IsProcessorFeaturePresent
GetSystemDirectoryA
GetCurrentDirectoryA
GetConsoleAliasExesLengthW
PostQueuedCompletionStatus
IsBadReadPtr
WriteConsoleOutputCharacterW
GetEnvironmentVariableW
GetSystemWindowsDirectoryA
GetEnvironmentVariableA
GetConsoleMode
ConnectNamedPipe
FindFirstVolumeA
GetSystemDirectoryA
FileTimeToDosDateTime
MultiByteToWideChar
WriteProfileStringA
SetConsoleTitleA
FindFirstChangeNotificationA
DisconnectNamedPipe
GetProcessWorkingSetSize
GetConsoleMode
FlushFileBuffers
GetTempPathA
GetProfileStringA
EndUpdateResourceA
GetThreadLocale
DeleteTimerQueue
MoveFileExA
WideCharToMultiByte
CreateWaitableTimerA
UnregisterWait
IsProcessorFeaturePresent
DeleteTimerQueueEx
OpenFileMappingA
CopyFileExA
SetFirmwareEnvironmentVariableA
GetFileInformationByHandle
advapi32
QueryUsersOnEncryptedFile
user32
SetCursor
ChangeClipboardChain
DisplayExitWindowsWarnings
HiliteMenuItem
RemovePropA
GetScrollBarInfo
LoadRemoteFonts
CallWindowProcA
DrawTextExA
GetNextDlgTabItem
TranslateMessageEx
OffsetRect
CreateIconFromResource
InvalidateRgn
GetForegroundWindow
GetClipboardSequenceNumber
CreateDialogParamA
LockWindowUpdate
GetCaretBlinkTime
RegisterClipboardFormatW
ChangeMenuA
CreateWindowExA
GetWindowTextLengthW
GetMenuContextHelpId
SwitchToThisWindow
PostMessageA
GetKeyState
GrayStringA
SetWindowsHookExA
EnableMenuItem
ActivateKeyboardLayout
ToUnicode
SetWindowsHookExA
GetWindowLongA
DrawTextA
LoadAcceleratorsA
GetCursorFrameInfo
RegisterRawInputDevices
GetFocus
opengl32
glRasterPos2i
Sections
CODE Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ