Static task
static1
Behavioral task
behavioral1
Sample
5cee47823d5df948a0ab6a9dd8e4c7f17e9f5cea446d5337a25ad4778329e9bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5cee47823d5df948a0ab6a9dd8e4c7f17e9f5cea446d5337a25ad4778329e9bb.exe
Resource
win10v2004-20221111-en
General
-
Target
5cee47823d5df948a0ab6a9dd8e4c7f17e9f5cea446d5337a25ad4778329e9bb
-
Size
100KB
-
MD5
ba8e6882a747f32a3634d45d3ec6ac3d
-
SHA1
1c7f556ebf00d10045fcd83e1b6f112983af8568
-
SHA256
5cee47823d5df948a0ab6a9dd8e4c7f17e9f5cea446d5337a25ad4778329e9bb
-
SHA512
1ab5221de09909cc6d7dcf80337c01723563c26a7483df6e203a6fcbdd99b8449be621b7d459762bcaa653cce9b02c31c84d5fdf9a668e014291ee28e2d11470
-
SSDEEP
1536:QNe5U1eg7e0hKNjSCqti6NBB+M3AW88NgrRnIZh+RtWVa7Ke:Iog7REFKNBMMT88KMhKr
Malware Config
Signatures
Files
-
5cee47823d5df948a0ab6a9dd8e4c7f17e9f5cea446d5337a25ad4778329e9bb.exe windows x86
8bde5c286ff8f45607c5b6399773e6fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
OpenEventA
FindResourceA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
user32
AnyPopup
CharLowerA
shell32
DragQueryPoint
msvcr80
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
_ismbblead
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
memset
_mbsstr
__p__commode
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.po2 Size: 4KB - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ