Static task
static1
Behavioral task
behavioral1
Sample
04e526ff4448a4698fd30ee829ae1d78d89eb3f9641454038d520680c3f1a9fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
04e526ff4448a4698fd30ee829ae1d78d89eb3f9641454038d520680c3f1a9fc.exe
Resource
win10v2004-20221111-en
General
-
Target
04e526ff4448a4698fd30ee829ae1d78d89eb3f9641454038d520680c3f1a9fc
-
Size
168KB
-
MD5
3b26c6f0ceda7be70b2d006da996b960
-
SHA1
be57f302158236a0660b26cbf7b34acb77920482
-
SHA256
04e526ff4448a4698fd30ee829ae1d78d89eb3f9641454038d520680c3f1a9fc
-
SHA512
7e40575150a23bf399547185c7a84e10ba2388fc923755f78e55358d5bde47b0bc005f2a02e901063590920c6a9e8c334f8a60102682243aa3c26ebeb3ec8bff
-
SSDEEP
3072:RLcrumyR5I+XV/zf216doBgZbRUbzdzHllr9S1AAb4yJ:SwZjyBw9UbzFH7I1As
Malware Config
Signatures
Files
-
04e526ff4448a4698fd30ee829ae1d78d89eb3f9641454038d520680c3f1a9fc.exe windows x86
3d683d9a019362c782a3ac4ca00aa31d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
GetWindowsDirectoryA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetTickCount
CloseHandle
CreateProcessA
lstrcpynA
CompareFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
lstrcatA
GetCurrentProcess
lstrcpyA
CreateThread
GetModuleHandleA
WaitForSingleObject
lstrcmpiA
CreateSemaphoreA
FindClose
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalFree
DeleteFileA
IsBadWritePtr
GetFullPathNameA
IsBadStringPtrA
CompareStringW
CompareStringA
FlushFileBuffers
ReadFile
SetStdHandle
GetSystemInfo
VirtualProtect
IsBadReadPtr
SetFilePointer
VirtualQuery
GetStringTypeW
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
HeapSize
TerminateProcess
GetTimeZoneInformation
GetCurrentProcessId
lstrlenW
Sleep
WideCharToMultiByte
GetShortPathNameA
OutputDebugStringW
OutputDebugStringA
InterlockedExchange
IsBadCodePtr
GetLastError
GetModuleFileNameA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GlobalAlloc
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCurrentThreadId
QueryPerformanceCounter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCPInfo
GetOEMCP
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RaiseException
RtlUnwind
HeapAlloc
ExitProcess
HeapFree
SetEnvironmentVariableA
user32
GetSystemMetrics
wsprintfA
DefWindowProcA
PostMessageA
RegisterClassA
UnregisterClassA
TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
MessageBoxA
LoadStringA
CharNextA
advapi32
RegQueryInfoKeyA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject
CoGetClassObject
CoUninitialize
CLSIDFromString
CoInitialize
CreateClassMoniker
GetRunningObjectTable
oleaut32
CreateStdDispatch
CreateDispTypeInfo
SystemTimeToVariantTime
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
VariantInit
SysAllocStringLen
SysFreeString
VariantCopy
VariantClear
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE