Static task
static1
Behavioral task
behavioral1
Sample
5cfa1dbc89f1c6cc0236865c333d5d5e2fecc951a041e4c2ee2dc12617b63061.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5cfa1dbc89f1c6cc0236865c333d5d5e2fecc951a041e4c2ee2dc12617b63061.exe
Resource
win10v2004-20220901-en
General
-
Target
5cfa1dbc89f1c6cc0236865c333d5d5e2fecc951a041e4c2ee2dc12617b63061
-
Size
329KB
-
MD5
244f3482ac95869607945937a2d580c9
-
SHA1
ae7e6263fcc81971a897f130268d783eb313738e
-
SHA256
5cfa1dbc89f1c6cc0236865c333d5d5e2fecc951a041e4c2ee2dc12617b63061
-
SHA512
68bb30fdd6a7226648bde80f9968d7418416b50a534bc0c5dd49d97f47d8ac49de27ca1d2e215b5245090919edf2029460d357e489b85b028b908f8c63874059
-
SSDEEP
6144:zVd+myGRmiRzwzdTNAfiKhrf6HcTE6QJWU0xjv/+wQ6M/7N262FB:pd+myGnzwRqGHco6mSD/ZvIx2P
Malware Config
Signatures
Files
-
5cfa1dbc89f1c6cc0236865c333d5d5e2fecc951a041e4c2ee2dc12617b63061.exe windows x86
f4aac3caca4536f2f93557d37d12b164
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapCreate
GetUserDefaultLangID
CompareFileTime
GetModuleHandleA
LoadLibraryExA
InterlockedExchange
GetAtomNameA
GetConsoleCP
GetTickCount
WaitForMultipleObjects
lstrlenA
GetCommandLineA
GlobalSize
GlobalUnlock
GetVersion
CloseHandle
ResumeThread
VirtualProtect
GetConsoleDisplayMode
WaitForSingleObject
user32
wsprintfA
SetForegroundWindow
DrawTextA
CloseWindow
GetTitleBarInfo
ReleaseDC
DragDetect
CreateIcon
EndPaint
FrameRect
GetClassNameA
GetDC
GetCursorPos
GetFocus
GetWindow
BeginPaint
GetParent
ShowWindow
FillRect
rastapi
PortClose
DeviceDone
AddPorts
DeviceConnect
DeviceListen
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ