Static task
static1
Behavioral task
behavioral1
Sample
0ac18952feb8eeebd9afaaa29c141a5f3f29adad5f8a6d8dbe033da1b42a94ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ac18952feb8eeebd9afaaa29c141a5f3f29adad5f8a6d8dbe033da1b42a94ca.exe
Resource
win10v2004-20221111-en
General
-
Target
0ac18952feb8eeebd9afaaa29c141a5f3f29adad5f8a6d8dbe033da1b42a94ca
-
Size
384KB
-
MD5
5523109ced79c1401979d629196e0f7c
-
SHA1
d5d6113aa68626f00bfea0b66d6994e04256a92b
-
SHA256
0ac18952feb8eeebd9afaaa29c141a5f3f29adad5f8a6d8dbe033da1b42a94ca
-
SHA512
432e7c2bd0a1086b3e7bd149646821b4bf5aa6f4651c4854f287855bd1691b760cfa0c4298646a610c46dd8304aabed81b840f6910d28c8a76692e35adea5e2b
-
SSDEEP
6144:NrCGUYPCItu7y05B1PTDHUXAbKlZLFHXcwc49yBUTkWzSoKdtCsUviBo87j8posE:NrC9XI41B1UXW03fcCzSoKdcsUvizjLb
Malware Config
Signatures
Files
-
0ac18952feb8eeebd9afaaa29c141a5f3f29adad5f8a6d8dbe033da1b42a94ca.exe windows x86
61348da59d4fb853260d70725af7df43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetProcAddress
WaitForSingleObject
SetEvent
ReleaseSemaphore
GetProcessHeap
OpenMutexA
GetSystemTime
ResumeThread
VirtualFree
GetLastError
HeapReAlloc
InterlockedExchange
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
TerminateThread
VirtualLock
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualQuery
user32
GetDesktopWindow
LoadBitmapA
LoadIconA
gdi32
SelectObject
msvfw32
ICRemove
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 701KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ