Static task
static1
Behavioral task
behavioral1
Sample
5e8b6a8a99749ca85f8e7c94005e9e1042df175ad4526bf7fec5513ce8ec1655.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e8b6a8a99749ca85f8e7c94005e9e1042df175ad4526bf7fec5513ce8ec1655.exe
Resource
win10v2004-20220812-en
General
-
Target
5e8b6a8a99749ca85f8e7c94005e9e1042df175ad4526bf7fec5513ce8ec1655
-
Size
388KB
-
MD5
b2abec20fe416234158656ad3e55ae7b
-
SHA1
36fc95f1b6f59b37570a90aec540e02296f61544
-
SHA256
5e8b6a8a99749ca85f8e7c94005e9e1042df175ad4526bf7fec5513ce8ec1655
-
SHA512
61c935e5114b59653b184f79f548b9f08979f5abfedec448b48dedb02f6ff3eda5b548dc22a5025a3693cbc1178f91e47a51b8dd9345fd1f01a21b2148f26100
-
SSDEEP
6144:S3sq8rkTCEi0rxxTRVt4GBTr8sZOUsmNM1HZj3PF6M1oDi5E9R:Q2kmKF1Fdr8KOVOM1HZj3PQTi5
Malware Config
Signatures
Files
-
5e8b6a8a99749ca85f8e7c94005e9e1042df175ad4526bf7fec5513ce8ec1655.exe windows x86
aaedc73af6b7cd2585a6f43c542693f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
WriteConsoleOutputA
GetTimeZoneInformation
GetModuleHandleA
FreeEnvironmentStringsA
SetEnvironmentVariableA
TerminateProcess
GetSystemTime
EnterCriticalSection
HeapReAlloc
FileTimeToSystemTime
SetLastError
GetEnvironmentStrings
GetStringTypeW
GetLastError
OpenMutexW
HeapCreate
InterlockedIncrement
LoadLibraryA
LeaveCriticalSection
TlsFree
HeapAlloc
GetCurrentThread
GetCurrentProcess
LCMapStringW
GetProcAddress
SetVolumeLabelA
InitializeCriticalSection
TlsGetValue
FreeEnvironmentStringsW
HeapFree
GetStringTypeA
SetHandleCount
SetStdHandle
EnumResourceTypesA
WaitForDebugEvent
ReadFile
lstrcatA
CommConfigDialogW
GetLocalTime
MapViewOfFileEx
CreateMutexA
TlsAlloc
MultiByteToWideChar
GetCurrentProcessId
EnumTimeFormatsW
RtlUnwind
OutputDebugStringA
UnhandledExceptionFilter
GetVersion
GetFileAttributesExA
GetEnvironmentStringsW
lstrcpy
WideCharToMultiByte
GetStdHandle
IsBadWritePtr
QueryPerformanceCounter
TlsSetValue
SetFilePointer
GetTickCount
CompareStringA
GlobalAddAtomW
GetCPInfo
HeapSize
GetOEMCP
DeleteCriticalSection
CompareStringW
GetCommandLineA
LoadLibraryW
GetFileType
EnumCalendarInfoExA
CloseHandle
FlushFileBuffers
GetStartupInfoA
WriteFile
LCMapStringA
HeapDestroy
ExitProcess
VirtualAlloc
GetNumberFormatA
ResumeThread
GetCurrentThreadId
GetACP
GetModuleFileNameA
CopyFileExA
SetTimeZoneInformation
GetCompressedFileSizeW
VirtualQuery
GetSystemTimeAsFileTime
OpenMutexA
VirtualFree
CreateNamedPipeA
InterlockedDecrement
user32
UnregisterClassA
SendNotifyMessageA
IsCharAlphaNumericW
GetDCEx
DragObject
SetWindowTextA
GetKeyboardLayoutList
MessageBoxA
DefWindowProcA
RegisterClassA
CreateWindowExW
MapWindowPoints
IsMenu
SetWindowsHookA
DestroyWindow
ShowWindow
DrawAnimatedRects
ModifyMenuA
GetSubMenu
DdeQueryNextServer
LoadImageW
DrawFocusRect
GetTitleBarInfo
RegisterClassExA
GetProcessDefaultLayout
comctl32
CreatePropertySheetPageW
ImageList_LoadImageW
MakeDragList
ImageList_DragMove
InitCommonControlsEx
DrawStatusText
ImageList_LoadImageA
CreateToolbarEx
ImageList_Remove
ImageList_EndDrag
ImageList_AddIcon
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ