Static task
static1
Behavioral task
behavioral1
Sample
cd52f8333a1f9951a7abde89108e5efd6ff08f718d8e847c958def90f4b418a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd52f8333a1f9951a7abde89108e5efd6ff08f718d8e847c958def90f4b418a7.exe
Resource
win10v2004-20220901-en
General
-
Target
cd52f8333a1f9951a7abde89108e5efd6ff08f718d8e847c958def90f4b418a7
-
Size
85KB
-
MD5
5291964303d10cc8eef5de7bc241273d
-
SHA1
2ac3ee545ca9217d17230974f9425f50686cc2ee
-
SHA256
cd52f8333a1f9951a7abde89108e5efd6ff08f718d8e847c958def90f4b418a7
-
SHA512
4c61a1305b25dcc740a71384126ab3c62a94eb2292cb9cb2c0942b4b2bb5768b2aebcf68261967da9691e05404d031cbd671d6d0463737ca35f7e33a7b258b26
-
SSDEEP
1536:d9eikx2a43RPnLA2kJ9VJKal26CXuJEfnqyrkdZvp4Y+g+9UHkGlIT2aV7XdMV2v:Xkx2rBP82cuaAbrKZ+S+9biy2ezdMkz7
Malware Config
Signatures
Files
-
cd52f8333a1f9951a7abde89108e5efd6ff08f718d8e847c958def90f4b418a7.exe windows x86
ab1cce4e0e626d747301a6eb911d86ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpCheckPlatform
kernel32
ExitProcess
GetEnvironmentVariableW
ReadFile
SetFileAttributesW
CreateFileW
LocalAlloc
GetSystemTime
GetModuleFileNameW
UnhandledExceptionFilter
GetProcessHeap
GetProcessShutdownParameters
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
HeapAlloc
IsDebuggerPresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetTickCount
user32
CreateWindowExW
AdjustWindowRect
GetClientRect
GetWindowContextHelpId
gdi32
BitBlt
msvcr90
exit
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
strlen
_wcmdln
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nou Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ