Static task
static1
Behavioral task
behavioral1
Sample
c5e337a3c699383bc572a666f64250d4bf42158594859f01a416f832286b9169.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5e337a3c699383bc572a666f64250d4bf42158594859f01a416f832286b9169.exe
Resource
win10v2004-20220812-en
General
-
Target
c5e337a3c699383bc572a666f64250d4bf42158594859f01a416f832286b9169
-
Size
158KB
-
MD5
c6e6a95968faa78f102d80cc964b2143
-
SHA1
d4d9934a51f07a01e97fdcde732319c7d5726989
-
SHA256
c5e337a3c699383bc572a666f64250d4bf42158594859f01a416f832286b9169
-
SHA512
af35980c6141f32c8bf852d1e03bd10c5efe9f4c426d020e4ce1a694137199dbf35cc99de6265387ecae230560da9504b1ae78f520d66e141f26e34c8e5d450c
-
SSDEEP
1536:RoFmDeTmTmxzaLeUIwSIKOmJELHGOeU9w:RtsxGLQwS3OQELH/g
Malware Config
Signatures
Files
-
c5e337a3c699383bc572a666f64250d4bf42158594859f01a416f832286b9169.exe windows x86
1f2012b92a702a9e1913a3b9a8e5b044
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
VirtualAlloc
CreateThread
CloseHandle
ExitProcess
UnhandledExceptionFilter
LocalFree
HeapAlloc
lstrcpyW
GetLastError
HeapFree
LocalFree
GetCurrentThreadId
CreateFileW
SetFilePointer
LocalAlloc
ExitProcess
FreeLibrary
GetACP
QueryPerformanceCounter
GetACP
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
lstrlenW
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
FormatMessageW
GetCurrentProcessId
lstrlenW
GetProcessHeap
VirtualAlloc
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
LocalFree
InterlockedDecrement
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetACP
LocalAlloc
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE