Static task
static1
Behavioral task
behavioral1
Sample
52bf1601e41fce864e06696a2bd88578ccd2abc601404b628f21114023b9e2bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52bf1601e41fce864e06696a2bd88578ccd2abc601404b628f21114023b9e2bf.exe
Resource
win10v2004-20220812-en
General
-
Target
52bf1601e41fce864e06696a2bd88578ccd2abc601404b628f21114023b9e2bf
-
Size
372KB
-
MD5
f4649cd16609f3db903eea852c7d8eed
-
SHA1
9a09f8f171e1527b40f1fa6d77fd8e0d0a0cd1f2
-
SHA256
52bf1601e41fce864e06696a2bd88578ccd2abc601404b628f21114023b9e2bf
-
SHA512
f2cb2331259e88f196557fc64579fcb86c4a335460c86e57950813c79a29a4f16142acf25b42a550beadbc20736779841896c5d060c11e666c632e72126cc03e
-
SSDEEP
6144:1ZRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:1ZneF8m4ewS/HcF+ih7wp10l1h+TxqM
Malware Config
Signatures
Files
-
52bf1601e41fce864e06696a2bd88578ccd2abc601404b628f21114023b9e2bf.exe windows x86
e341ec6aca20472df21616d0b7f23698
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GlobalFree
GetLocalTime
GetTickCount
FreeConsole
ExitThread
GetComputerNameW
CreateFileA
ReadFile
CloseHandle
LocalFree
GetModuleHandleW
GetExitCodeProcess
VirtualAlloc
FindVolumeClose
GetPrivateProfileIntW
GlobalSize
ReleaseMutex
lstrlenA
SetEvent
user32
GetCursorInfo
GetClassInfoA
EndDialog
GetClientRect
DispatchMessageA
GetDlgItem
DrawStateW
GetKeyState
CreateWindowExA
GetMenu
FillRect
GetCaretPos
CallWindowProcA
clbcatq
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
msexch40
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ