Static task
static1
Behavioral task
behavioral1
Sample
4a526b6912bb854470ce19d362b7bcf1734b8bbd2bf783e0e3ea08f8d212ccf0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4a526b6912bb854470ce19d362b7bcf1734b8bbd2bf783e0e3ea08f8d212ccf0.exe
Resource
win10v2004-20220901-en
General
-
Target
4a526b6912bb854470ce19d362b7bcf1734b8bbd2bf783e0e3ea08f8d212ccf0
-
Size
209KB
-
MD5
08f0f72ff7db127a97010300a59c6550
-
SHA1
d1bce08052871b2d2029d510e60df6f7dc0448f1
-
SHA256
4a526b6912bb854470ce19d362b7bcf1734b8bbd2bf783e0e3ea08f8d212ccf0
-
SHA512
d2fbd77c65f8d3b0d7351c34dab69e370bc01b514f3be71868fe07ebe7e3f43969027c2e3b80ffdd3925cae79a4b21b5661a3291e196e7272fab993ad9f41ce9
-
SSDEEP
6144:g5xeYPH3+CBCRmhiko16YJSQ6G67erP2FQND19z+:geY60hs796dFQRr+
Malware Config
Signatures
Files
-
4a526b6912bb854470ce19d362b7bcf1734b8bbd2bf783e0e3ea08f8d212ccf0.exe windows x86
cd5c78100ee5b884d0aa4b32a69141cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
FindResourceA
lstrcpyA
GetCurrentProcessId
lstrlenA
GetLocaleInfoA
HeapFree
QueryPerformanceCounter
HeapAlloc
SetUnhandledExceptionFilter
GetProcessHeap
LoadLibraryW
lstrcmpA
CloseHandle
GetTickCount
GetLocalTime
SystemTimeToFileTime
WideCharToMultiByte
CreateFileA
GetOEMCP
MultiByteToWideChar
SetLastError
GetCurrentProcess
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
scecli
SceAddToObjectList
SceBrowseDatabaseTable
SceCloseProfile
SceAppendSecurityProfileInfo
SceAnalyzeSystem
SceAddToNameStatusList
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ