Static task
static1
Behavioral task
behavioral1
Sample
5a83a26b4214acb8949b10b7fde8e9553b14fc235fc2774da5013771a19d3c51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a83a26b4214acb8949b10b7fde8e9553b14fc235fc2774da5013771a19d3c51.exe
Resource
win10v2004-20220812-en
General
-
Target
5a83a26b4214acb8949b10b7fde8e9553b14fc235fc2774da5013771a19d3c51
-
Size
820KB
-
MD5
97ff26674654a1554afb03172d52f726
-
SHA1
8e5bd38d4f54aba35865a51551ced5c2ae6e67f8
-
SHA256
5a83a26b4214acb8949b10b7fde8e9553b14fc235fc2774da5013771a19d3c51
-
SHA512
e26040e06c384630614ae448449afeb700d48596fc23085c6869a7830c341d7c156844cc8b3acfd78c0a8c3848693ce8fc0e3ce778977ff01a140c4b9e8540f4
-
SSDEEP
24576:0baMTrxodN/B7zFIsEeYCX2cJhU/5BV+TIUbq3NMqD:0bnKN/lzFqzClQzVWqD
Malware Config
Signatures
Files
-
5a83a26b4214acb8949b10b7fde8e9553b14fc235fc2774da5013771a19d3c51.exe windows x86
22591583dd4e8c66ff4b21565806670e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetCurrentThread
GetVersion
GetCurrentThreadId
GetCommandLineA
ExitProcess
VirtualAlloc
GetFileSize
GetTickCount
CreateFileA
TlsSetValue
InterlockedDecrement
VirtualFree
VirtualQuery
CreateFileW
HeapCreate
GetTimeZoneInformation
WriteConsoleA
LCMapStringA
TerminateProcess
LocalFree
FreeLibrary
HeapReAlloc
CloseHandle
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetStringTypeA
SetFilePointer
GetProcessHeap
TlsFree
GetProcAddress
FreeEnvironmentStringsW
lstrlenW
SetErrorMode
UnhandledExceptionFilter
GetCPInfo
DeleteFileA
LocalAlloc
GetConsoleMode
GetEnvironmentStrings
GetCurrentProcess
DeleteCriticalSection
GetModuleFileNameA
GetVersionExA
LoadLibraryA
FlushFileBuffers
GlobalUnlock
IsDebuggerPresent
QueryPerformanceCounter
GetOEMCP
GetConsoleCP
GetFileAttributesA
ReleaseMutex
LCMapStringW
GetLocaleInfoA
HeapFree
InitializeCriticalSection
user32
DispatchMessageA
GetClientRect
LoadCursorA
GetDlgItem
SetForegroundWindow
SendMessageA
IsWindowVisible
ShowWindow
wsprintfA
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
GetDesktopWindow
SetWindowPos
PostQuitMessage
EndDialog
Sections
.text Size: 772KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ