Static task
static1
Behavioral task
behavioral1
Sample
837cad0f5ac77b082b5728c5aeb45120f8e4c11b4efadead0e175263a8e48126.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
837cad0f5ac77b082b5728c5aeb45120f8e4c11b4efadead0e175263a8e48126.exe
Resource
win10v2004-20220812-en
General
-
Target
837cad0f5ac77b082b5728c5aeb45120f8e4c11b4efadead0e175263a8e48126
-
Size
189KB
-
MD5
57a144f8f088676d578cf216b7f86a6f
-
SHA1
0043e6a9b5f3ccc1751f66de7bb8dcdb45ce41eb
-
SHA256
837cad0f5ac77b082b5728c5aeb45120f8e4c11b4efadead0e175263a8e48126
-
SHA512
c4a745b56050a7d58d4825a3ca04184c055bbbde0df2291e55893c7454ee425b7838a2c43f475f186b84d8f2d7eed44991d1a1b4b16a1cf2de463964e4848ced
-
SSDEEP
3072:LcswgHqXTjBJy801NbVzwVs0wlZ9wjoOAKdh8Ha8bCaTOBi/tNWHcP4b8WDx4iVs:LcsXHqn41NbqTCwsdKU68jCseY4fDxXm
Malware Config
Signatures
Files
-
837cad0f5ac77b082b5728c5aeb45120f8e4c11b4efadead0e175263a8e48126.exe windows x86
d2f001b2f07c07fd5ee0f3bd3fd499f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
Sleep
GetLocalTime
GetEnvironmentStrings
LCMapStringA
SetProcessAffinityMask
SetEvent
CreateFileA
LoadLibraryA
GetModuleFileNameW
DeleteCriticalSection
LCMapStringW
GetOEMCP
GetCurrentThreadId
WriteFile
GetStringTypeW
GetSystemTimeAsFileTime
GetCPInfo
WaitForSingleObject
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
FreeEnvironmentStringsA
GetConsoleOutputCP
CreateEventW
GlobalAlloc
EnumResourceTypesA
MoveFileW
FreeEnvironmentStringsW
CreateProcessW
ReadFile
GetStringTypeA
GetProfileIntA
WaitForMultipleObjects
GetEnvironmentStringsW
GlobalLock
WriteConsoleA
InterlockedDecrement
GetLocaleInfoA
GetACP
InterlockedIncrement
TerminateThread
OutputDebugStringW
WriteConsoleW
SetStdHandle
IsValidCodePage
SetEndOfFile
GlobalUnlock
ole32
CoMarshalHresult
CoTaskMemFree
CoSetProxyBlanket
CoQueryProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
StringFromGUID2
imm32
ImmAssociateContext
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ