Static task
static1
Behavioral task
behavioral1
Sample
5b2bd63f45072a5e42de50d6e773b0d3cf0fa1863bf3b519e06095efd42d8257.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b2bd63f45072a5e42de50d6e773b0d3cf0fa1863bf3b519e06095efd42d8257.exe
Resource
win10v2004-20220812-en
General
-
Target
5b2bd63f45072a5e42de50d6e773b0d3cf0fa1863bf3b519e06095efd42d8257
-
Size
184KB
-
MD5
e10f8163915614423906fbd78ff452ed
-
SHA1
e34a80b886405052f81aa66e3017ec1904d498d8
-
SHA256
5b2bd63f45072a5e42de50d6e773b0d3cf0fa1863bf3b519e06095efd42d8257
-
SHA512
884fb600bd3c8c1beeed9d09aa23cdb593b21e9d336f8a80bec7373d5f0cd522da5b6a1ecec60bcfa634b3473a25ed8b340c8d3c5c58579a465c7975e35ed31e
-
SSDEEP
3072:fNfNFoA6q3dgUmbeQzPDZ4sfvcZq5ou7I3n0T7yw9YV6Q9B8u4:1UncFqN4gb780T7yII6QT
Malware Config
Signatures
Files
-
5b2bd63f45072a5e42de50d6e773b0d3cf0fa1863bf3b519e06095efd42d8257.exe windows x86
12a99dfc0e49078780b42e734b2fa413
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
acrodistdll
_DistBeginFileJob@16
_DistCancelJob@0
_DistInitialize@36
_DistMain@16
_DistTerminate@0
kernel32
lstrcpyA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetProfileStringA
FindClose
FindFirstFileA
GetFileAttributesA
GetTickCount
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetConsoleCtrlHandler
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
WideCharToMultiByte
GetModuleHandleA
GetShortPathNameA
MultiByteToWideChar
lstrlenW
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcmpiA
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
SetLastError
GetLastError
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
SetStdHandle
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetFilePointer
SetUnhandledExceptionFilter
HeapSize
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
HeapFree
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
WriteFile
user32
MessageBoxA
GetForegroundWindow
PostMessageA
PostThreadMessageA
DispatchMessageA
GetMessageA
wsprintfA
LoadStringA
TranslateMessage
CharNextA
advapi32
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeregisterEventSource
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
StartServiceCtrlDispatcherA
ControlService
DeleteService
CreateServiceA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
ReportEventA
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
oleaut32
VariantInit
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
UnRegisterTypeLi
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantClear
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uvbwtoz Size: 84KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE