Static task
static1
Behavioral task
behavioral1
Sample
f5c420388aed1976dc367979c86a5d78b5972ada0478100395def004daffbff3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5c420388aed1976dc367979c86a5d78b5972ada0478100395def004daffbff3.exe
Resource
win10v2004-20220812-en
General
-
Target
f5c420388aed1976dc367979c86a5d78b5972ada0478100395def004daffbff3
-
Size
1017KB
-
MD5
446878bf2c1ef94e7e5f66b3a4c0c8a1
-
SHA1
fb634aec35cfeb72af8aef52003a259154f01b24
-
SHA256
f5c420388aed1976dc367979c86a5d78b5972ada0478100395def004daffbff3
-
SHA512
413b3d22844617717180e4ac8abcfb179b028837454d04a36f6fde79e62786124d3e42398ddb222d1b2eda403c8a2a5c6b5f1db508766ac3567136a07934ba3a
-
SSDEEP
6144:qUzw4PPPsQy8GuaMBm5S/40Dm4znzHbeDU6jn2CUm/5tqmyhV:nw4PPPsQDFWcDm4yI6jMwqj
Malware Config
Signatures
Files
-
f5c420388aed1976dc367979c86a5d78b5972ada0478100395def004daffbff3.exe windows x86
65d2a7f8a3f4155b0db368c0e233b1fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
BuildTrusteeWithSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptSetProvParam
CryptSignHashA
EnumServicesStatusExW
LsaStorePrivateData
ObjectDeleteAuditAlarmW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegisterServiceCtrlHandlerW
SetServiceStatus
SystemFunction003
kernel32
InterlockedCompareExchange
InterlockedExchange
LocalAlloc
LocalFree
Sleep
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
ScrollConsoleScreenBufferA
FreeLibrary
GetProcessPriorityBoost
AddAtomW
CloseHandle
CreateEventW
CreateTapePartition
CreateThread
EnumCalendarInfoExA
GetConsoleAliasesA
GetCurrentProcess
GetEnvironmentStrings
GetFileSizeEx
GetNamedPipeInfo
GetSystemDefaultUILanguage
GetSystemTime
GlobalUnlock
MultiByteToWideChar
ResetEvent
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObject
CreateNamedPipeW
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapSize
IsBadReadPtr
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapAlloc
ExitProcess
GetProcAddress
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapReAlloc
IsBadWritePtr
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
LoadLibraryA
InitializeCriticalSection
RtlUnwind
VirtualQuery
GetStringTypeA
GetStringTypeW
GetCurrentDirectoryW
VirtualProtect
GetSystemInfo
CreateFileA
GetLocaleInfoA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
IsBadCodePtr
ReadFile
FlushFileBuffers
GetDriveTypeA
GetFullPathNameA
SetEndOfFile
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
shell32
FindExecutableA
user32
FillRect
UnionRect
GetCapture
GetInputDesktop
GetMonitorInfoA
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 900KB - Virtual size: 898KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE