Static task
static1
Behavioral task
behavioral1
Sample
05a84eed1c6842faf53a84fe2fac27059d2fa1d8cbc079a8e65937ad8a50e1c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05a84eed1c6842faf53a84fe2fac27059d2fa1d8cbc079a8e65937ad8a50e1c8.exe
Resource
win10v2004-20221111-en
General
-
Target
05a84eed1c6842faf53a84fe2fac27059d2fa1d8cbc079a8e65937ad8a50e1c8
-
Size
433KB
-
MD5
f1ee397c480d9fe130514ee31c8fbc6e
-
SHA1
83e47013e87939cb2990adbea9bb6885d3b785ea
-
SHA256
05a84eed1c6842faf53a84fe2fac27059d2fa1d8cbc079a8e65937ad8a50e1c8
-
SHA512
ff2c03a9e9b10f83115fc80782eaa6bf4c33cbb61686e8174a1e10380ae587e3559f6ecd5cf0baec721b2f31a2526f305af5b2ba4987e40d7036afbd8abd7c03
-
SSDEEP
6144:i96wgvRHCzOYtqlGyzcsX3KA0LQIQRlsbqvsmUVKsv3hddddddddL:E3gNCpOdn/uDbKDUVKsvxddddddddL
Malware Config
Signatures
Files
-
05a84eed1c6842faf53a84fe2fac27059d2fa1d8cbc079a8e65937ad8a50e1c8.exe windows x86
6bc334093103580ea0b8140d931e91f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
FreeLibrary
IsBadWritePtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 395KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hujn Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 84B - Virtual size: 84B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ