Static task
static1
Behavioral task
behavioral1
Sample
51fde119bdfa2d38b127360991a54c56c421b81e69ad7bc5761110172ff25a47.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
51fde119bdfa2d38b127360991a54c56c421b81e69ad7bc5761110172ff25a47.exe
Resource
win10v2004-20220812-en
General
-
Target
51fde119bdfa2d38b127360991a54c56c421b81e69ad7bc5761110172ff25a47
-
Size
137KB
-
MD5
3c8af02d8cf7c13d1d78aa881f3ea5f6
-
SHA1
0dca9181c3aa0d6ee1d418d880eaa7c3bab260ab
-
SHA256
51fde119bdfa2d38b127360991a54c56c421b81e69ad7bc5761110172ff25a47
-
SHA512
d0e9c06bfc722e87d794a39ec5f7c835a76c2757baba2f265cec193cec3eeb89c579227d3f1a2659d3be0d42d4cf779d88bce0352fa9e2cbc42e2a3b570b70b0
-
SSDEEP
1536:TfWKzKQtOjLZO8I6jocPbs14PDe+xzE31zlS/aEO8O/ESMCFacmqZFOh/UWlyNSm:Tf0O8Isb5+31zlS/FO8O1bF+q7XWw7
Malware Config
Signatures
Files
-
51fde119bdfa2d38b127360991a54c56c421b81e69ad7bc5761110172ff25a47.exe windows x86
7519b73233303102c2eaa3df62b3cd1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sisbkup
SisCSFilesToBackupForLink
SisFreeAllocatedMemory
SisRestoredLink
SisRestoredCommonStoreFile
kernel32
MultiByteToWideChar
SetEnvironmentVariableA
HeapSize
GetLocaleInfoW
FlushFileBuffers
CreateFileA
InterlockedDecrement
InterlockedCompareExchange
SetTapeParameters
GetCommandLineA
GetDriveTypeA
GetFileAttributesA
CreateProcessA
SetSystemPowerState
GetEnvironmentVariableA
GetShortPathNameA
GetProcAddress
RemoveDirectoryA
CopyFileA
GetTempFileNameA
GetLocalTime
LocalAlloc
WaitForMultipleObjects
LoadLibraryExA
LocalFree
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
GetSystemTimeAsFileTime
GetLastError
CloseHandle
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
EnterCriticalSection
LeaveCriticalSection
Sleep
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
SetStdHandle
ExitProcess
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
ReadFile
LCMapStringA
LCMapStringW
RtlUnwind
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ