Static task
static1
Behavioral task
behavioral1
Sample
5c6a231e0273396c12d26d0d09e102b47039598211d852bd266b7c11b1b6792e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c6a231e0273396c12d26d0d09e102b47039598211d852bd266b7c11b1b6792e.exe
Resource
win10v2004-20220812-en
General
-
Target
5c6a231e0273396c12d26d0d09e102b47039598211d852bd266b7c11b1b6792e
-
Size
228KB
-
MD5
0f0f43cd295ffb6f633d8d9244e74836
-
SHA1
d41e8342bc81e31014147b6e23329309d1655ab0
-
SHA256
5c6a231e0273396c12d26d0d09e102b47039598211d852bd266b7c11b1b6792e
-
SHA512
68c87bf3f92f13e65c492b5aedeb5ee6228d9dd5a45c0fd827d075cc6a81c60f4da5399a833307c6c87aec29a7902734f7af8ca86701ddf7fc5d8b0a3ff5e086
-
SSDEEP
3072:IjjjjjjjjjpvyDOh//9mlthYU7UfUxAUcG5Ej7aAG:HDp6AUfIcPeA
Malware Config
Signatures
Files
-
5c6a231e0273396c12d26d0d09e102b47039598211d852bd266b7c11b1b6792e.exe windows x86
1792722e7a0d953f667fc991d6aa1892
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCPInfo
GetFileType
GetOEMCP
GetStringTypeA
GetStringTypeW
GetSystemInfo
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InterlockedExchange
CreateFileMappingA
LCMapStringA
LCMapStringW
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetUnhandledExceptionFilter
UnmapViewOfFile
VirtualFree
VirtualProtect
VirtualQuery
lstrcpynA
VirtualAlloc
GetCurrentProcess
GetStartupInfoW
GlobalAlloc
GetWindowsDirectoryA
CreateFileW
GetWindowsDirectoryW
IsDBCSLeadByteEx
lstrcatW
user32
ReleaseDC
LoadCursorA
LoadIconA
MessageBoxA
GetFocus
SetCaretPos
GetDC
CreateCaret
ShowCaret
DefWindowProcA
GetSystemMetrics
GetSysColor
gdi32
GetStockObject
GetTextMetricsA
SelectObject
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
msvcrt
memcpy
free
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ