Static task
static1
Behavioral task
behavioral1
Sample
02520340c233f2a22b776af3f9e41d2b8786c060fc73443d9187826f44527bed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02520340c233f2a22b776af3f9e41d2b8786c060fc73443d9187826f44527bed.exe
Resource
win10v2004-20220812-en
General
-
Target
02520340c233f2a22b776af3f9e41d2b8786c060fc73443d9187826f44527bed
-
Size
140KB
-
MD5
ebf5a544241bda0e5786ab621d1bc6c1
-
SHA1
7b37e7f28513c4b2a18daf6dae38777e72241c5f
-
SHA256
02520340c233f2a22b776af3f9e41d2b8786c060fc73443d9187826f44527bed
-
SHA512
354adb32e3eb9cb98a927be48f190910b2663d0518ea82da0de2097e8df024d7b4e9da5701a3d83850629409aea178595f251544e9abfdaef9181162aab81fc9
-
SSDEEP
1536:sFLI7lPp+o0oOjjahcwjrvP6V9/K+/yinvEoBgiVBq:sFLINpwpwjrngcin8oqiVBq
Malware Config
Signatures
Files
-
02520340c233f2a22b776af3f9e41d2b8786c060fc73443d9187826f44527bed.exe windows x86
8781d000c4d195389e4b5f860db2b7b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
lstrcmpiA
CreateFileW
TlsSetValue
ExitProcess
GetVersionExA
GetCommandLineA
LoadLibraryA
WriteFile
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetVersion
VirtualAlloc
GetProcAddress
GetDefaultCommConfigA
TlsGetValue
VirtualFree
VirtualProtect
GetStringTypeW
GetOEMCP
GetModuleHandleA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetACP
user32
GetDC
RegisterClassExA
GetSystemMetrics
GetClientRect
gdi32
CreateBitmap
Rectangle
advapi32
RegCloseKey
shell32
StrStrIA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ