Static task
static1
Behavioral task
behavioral1
Sample
051038dca24b30d689c010d9bf4b9531e65c62de5f5aa23a5e070a7bf3a120ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
051038dca24b30d689c010d9bf4b9531e65c62de5f5aa23a5e070a7bf3a120ec.exe
Resource
win10v2004-20220812-en
General
-
Target
051038dca24b30d689c010d9bf4b9531e65c62de5f5aa23a5e070a7bf3a120ec
-
Size
826KB
-
MD5
130e889454b0f29e095636aa056d7b3c
-
SHA1
257782c3db36a5962a06bfd9653ab71f7f3852fd
-
SHA256
051038dca24b30d689c010d9bf4b9531e65c62de5f5aa23a5e070a7bf3a120ec
-
SHA512
7ee5c70f9046a45b1cfe6c3902bb96726b553f31f79d4cbb950d501812ef9fdf73c416d6957ad3c261d3d143aa57c94df89f3940e979c1df8523cee304777319
-
SSDEEP
12288:tm54p3N4T0n4eQTFbuk7iBAvB/JsGdnfD49otQpeIRqzpgsKTaKy7W7G/8a6ZX:tm54pQ5butBaB/XdnfoxQzpS2Ky70d
Malware Config
Signatures
Files
-
051038dca24b30d689c010d9bf4b9531e65c62de5f5aa23a5e070a7bf3a120ec.exe windows x86
b550a556852628a01c1afb1b141d15ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
LoadLibraryA
GetTimeZoneInformation
LocalAlloc
lstrcpyn
GetCommMask
GetModuleFileNameA
PurgeComm
FormatMessageW
BaseCheckAppcompatCache
IsValidCodePage
GetSystemTimeAsFileTime
GetStartupInfoA
SetConsoleCursorMode
GetStringTypeExA
SetConsoleOS2OemFormat
oleaut32
VARIANT_UserSize
VarBstrFromR8
SysReAllocString
VarSub
VarDateFromStr
SafeArrayAllocDescriptor
VarCyFromR4
VarMul
VarI8FromR8
VarCyFromDisp
LoadTypeLib
VarI1FromI2
VarDateFromBool
VarDateFromDisp
VarCyMulI8
VarUI1FromI4
OACreateTypeLib2
VarI1FromStr
VarCyNeg
SafeArrayDestroyDescriptor
w32topl
ToplScheduleValid
ToplGraphInit
ToplGraphRemoveVertex
ToplPScheduleValid
ToplListRemoveElem
ToplVertexInit
ToplAddEdgeToGraph
ToplGetAlwaysSchedule
user32
GrayStringW
SetForegroundWindow
MB_GetString
SendMessageTimeoutW
SetCursor
AdjustWindowRect
InvalidateRect
IsMenu
UserClientDllInitialize
SetDlgItemTextA
EnumPropsW
DragObject
GetMenuBarInfo
Sections
.text Size: 399KB - Virtual size: 399KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE