Static task
static1
Behavioral task
behavioral1
Sample
5f00b8580bb7d2729a93c6676dc0f811b70614266d81947d5b1620e96109372f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f00b8580bb7d2729a93c6676dc0f811b70614266d81947d5b1620e96109372f.exe
Resource
win10v2004-20221111-en
General
-
Target
5f00b8580bb7d2729a93c6676dc0f811b70614266d81947d5b1620e96109372f
-
Size
660KB
-
MD5
cd777222f5319b4e6cfa13bad37b71d4
-
SHA1
c2ef8ea8859793ba8e3f7205b46045bf0d3292e1
-
SHA256
5f00b8580bb7d2729a93c6676dc0f811b70614266d81947d5b1620e96109372f
-
SHA512
f26858795dafc476d594a90571e8d0ba0912aea2a1832facfa3bf6ca847e5f61cbe304204017d64e618c68c2ce34a5b1822e8d7e415ae22a8c475d751cee44a3
-
SSDEEP
12288:xjIvf6rzFLE6PG4bY3dFJfwh8fYK4IvxNA5g1cwsFTok:in0zFLv3uEh8fYJoxeW6Bo
Malware Config
Signatures
Files
-
5f00b8580bb7d2729a93c6676dc0f811b70614266d81947d5b1620e96109372f.exe windows x86
4068baea264af5e143f26d06a86cbd68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualFree
RemoveDirectoryA
DeleteFileA
ResumeThread
HeapAlloc
GetProcessHeap
GetTickCount
VirtualFreeEx
GetProcAddress
LoadLibraryExA
SetEvent
GetModuleHandleA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
WaitForSingleObject
WriteFile
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualQuery
ws2_32
recv
winmm
mciSendCommandA
avifil32
AVIMakeStreamFromClipboard
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 600KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ