Static task
static1
Behavioral task
behavioral1
Sample
5c4d47bccbe85e8d0872ecb7cf48ab435e3e166fc71fa658cd644f81450164b0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5c4d47bccbe85e8d0872ecb7cf48ab435e3e166fc71fa658cd644f81450164b0.exe
Resource
win10v2004-20221111-en
General
-
Target
5c4d47bccbe85e8d0872ecb7cf48ab435e3e166fc71fa658cd644f81450164b0
-
Size
454KB
-
MD5
4306699e06decabcc82f63063f9357e0
-
SHA1
30bc7837461a87e3bbddf6246b27a14285c25d1d
-
SHA256
5c4d47bccbe85e8d0872ecb7cf48ab435e3e166fc71fa658cd644f81450164b0
-
SHA512
8fd45ea8274e105ccba3247d928abd016c037e2a29252dece238a781fc6a2464be2799cb470ec0487ee8661637ad2f9ef054315adf5e8c9d38569ef2cd41f877
-
SSDEEP
12288:ZW2JL4wkh6PjktGJjEH93alccOYfoIf68n0WSMcc/bv:Q2JL4t6JjEH9ahQv80WSMcK
Malware Config
Signatures
Files
-
5c4d47bccbe85e8d0872ecb7cf48ab435e3e166fc71fa658cd644f81450164b0.exe windows x86
baf80dc508686b38d0f550a959036252
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
kernel32
CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement
advapi32
CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
Sections
.text Size: 304KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ