Static task
static1
Behavioral task
behavioral1
Sample
5850c9a424b5a283909cf1effd7d964d3516562a94dc8065d3310f2ffd35cc44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5850c9a424b5a283909cf1effd7d964d3516562a94dc8065d3310f2ffd35cc44.exe
Resource
win10v2004-20220812-en
General
-
Target
5850c9a424b5a283909cf1effd7d964d3516562a94dc8065d3310f2ffd35cc44
-
Size
129KB
-
MD5
d178b8ca0f02e47fb8ffc01a478e10d0
-
SHA1
8ba51b1261024a0ae950207a81532993fa1370fd
-
SHA256
5850c9a424b5a283909cf1effd7d964d3516562a94dc8065d3310f2ffd35cc44
-
SHA512
855b42944554239b89a6df99aab29508574dd1ff0641e8703f7db31e7f5049d1493406800b1ad5509f741ea1157762d1998df537ea90c703ba0bdb3f82eb424b
-
SSDEEP
3072:1YVVDqm0/ySHYWzmNB+JQx9X4s+y8aPlD8YFxHmG:rmijzU+JyX4s1R8Y5
Malware Config
Signatures
Files
-
5850c9a424b5a283909cf1effd7d964d3516562a94dc8065d3310f2ffd35cc44.exe windows x86
48eafa1dbf84de77d740b8f2d196c0c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
kernel32
GetProfileStringW
GetAtomNameW
FileTimeToSystemTime
FindResourceExA
CompareStringW
GetFileType
GetVersionExW
GetVolumeInformationW
SearchPathW
GetFileAttributesA
EnumResourceNamesA
GetFileTime
SetEndOfFile
UnlockFile
GetUserDefaultLangID
FlushFileBuffers
IsDBCSLeadByte
IsBadStringPtrA
FileTimeToLocalFileTime
LockFile
GetSystemDirectoryW
gdi32
SetTextColor
CreateFontIndirectA
PolyBezier
RoundRect
SetStretchBltMode
GetBkColor
FlattenPath
ExtCreatePen
StrokePath
PlgBlt
GetPath
CreatePen
AnimatePalette
GetBitmapBits
SetDIBits
comctl32
ImageList_Add
ImageList_DrawEx
ImageList_Create
ImageList_GetIconSize
ImageList_Destroy
comdlg32
GetFileTitleA
setupapi
pSetupWriteLogError
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ