Static task
static1
Behavioral task
behavioral1
Sample
05551676d8c5fe646ffe92f6c8dbcc99a2acd2d67b0ecf6620c1ae6715b083dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
05551676d8c5fe646ffe92f6c8dbcc99a2acd2d67b0ecf6620c1ae6715b083dc.exe
Resource
win10v2004-20221111-en
General
-
Target
05551676d8c5fe646ffe92f6c8dbcc99a2acd2d67b0ecf6620c1ae6715b083dc
-
Size
156KB
-
MD5
107fdb501640fcb8e7fedc49e3deb500
-
SHA1
d5a82cd77f241d18115e36657360e59920a5061c
-
SHA256
05551676d8c5fe646ffe92f6c8dbcc99a2acd2d67b0ecf6620c1ae6715b083dc
-
SHA512
863e395b4f34c33874652f5fc0462a0507f67da9ed9756e6000146d47f19612285e622d2586f8fbcadf0a0ba14dab942b1e8aaa78d6824e4efce7acc23511d8e
-
SSDEEP
3072:OXyPbjyDdIJxRgq81BQJXJMWhebcqhaZ+gD5wCO9mf1ES+HARrfJuRReBKYNO:OCDjyDd7QJXJMBaX5q9gEVHYhBKv
Malware Config
Signatures
Files
-
05551676d8c5fe646ffe92f6c8dbcc99a2acd2d67b0ecf6620c1ae6715b083dc.exe windows x86
656e9f826de28bf53ff52fcc9a77cd48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetLastError
GetModuleFileNameW
CreateNamedPipeA
CloseHandle
SetEvent
lstrlenW
GetDriveTypeW
GetLogicalDrives
lstrcmpW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
InitializeCriticalSection
GetCommandLineW
GetTickCount
ReleaseMutex
ResetEvent
WaitForMultipleObjectsEx
SetErrorMode
CreateEventW
CreateMutexW
CreateProcessW
MoveFileExW
GetSystemInfo
CreateFileA
ReadFile
SetFilePointer
DosDateTimeToFileTime
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
CreateFileW
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateSemaphoreW
VirtualFree
VirtualAlloc
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
user32
CharToOemA
OemToCharBuffA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
oleaut32
GetActiveObject
SafeArraySetRecordInfo
VarFormatPercent
VariantInit
Sections
.text Size: 91KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ