Static task
static1
Behavioral task
behavioral1
Sample
c5d49146a04fe40b118462e21e9a7cd77500cb5a1cde0b4123fda9802a23a880.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5d49146a04fe40b118462e21e9a7cd77500cb5a1cde0b4123fda9802a23a880.exe
Resource
win10v2004-20220812-en
General
-
Target
c5d49146a04fe40b118462e21e9a7cd77500cb5a1cde0b4123fda9802a23a880
-
Size
308KB
-
MD5
e4e5f930bf72a3244c7737e912236d08
-
SHA1
5cd10720963dbdc0d5d1757754a96d0d1204ebe1
-
SHA256
c5d49146a04fe40b118462e21e9a7cd77500cb5a1cde0b4123fda9802a23a880
-
SHA512
ca5b75612db78a35b1e7249517cafa1f2045ce2ca50eda480f118637f4de29db2216602a5eecf129b77fe075280f55927e8231842162ae9746dfff166a05857c
-
SSDEEP
6144:M0JWeAnAz/yOIZfQofHD/PZ139ZSuzueH6X4OwoFKKqMD/+:pDJy/9JjPXXSZeaZrqMD+
Malware Config
Signatures
Files
-
c5d49146a04fe40b118462e21e9a7cd77500cb5a1cde0b4123fda9802a23a880.exe windows x86
c93f82202ed0ec032ee26d89f7c8cb66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFileEx
lstrcmpA
FindResourceW
LoadLibraryA
GetModuleHandleW
GetCurrentDirectoryA
VirtualAllocEx
GetDiskFreeSpaceW
GetPrivateProfileIntA
GetStringTypeW
SetEnvironmentVariableA
ExitProcess
GetPrivateProfileSectionA
GetDiskFreeSpaceW
lstrcpyW
GetPrivateProfileIntA
GetLongPathNameA
WaitForSingleObject
GetExitCodeProcess
InterlockedIncrement
GetACP
Heap32First
InterlockedDecrement
apphelp
ApphelpCheckIME
ApphelpCheckExe
SdbCreateMsiTransformFile
AllowPermLayer
shell32
SHFree
DllUnregisterServer
DragFinish
ExtractIconA
DuplicateIcon
ShellMessageBoxA
ShellAboutA
StrChrA
SHGetSettings
DragAcceptFiles
SHGetDiskFreeSpaceA
SHGetMalloc
DragQueryFileA
dbghelp
ImageRvaToVa
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE