Static task
static1
Behavioral task
behavioral1
Sample
c5dda69f348b7de322edc7befb8e3825d6a7ff82d40e840855f64abecd90b978.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5dda69f348b7de322edc7befb8e3825d6a7ff82d40e840855f64abecd90b978.exe
Resource
win10v2004-20221111-en
General
-
Target
c5dda69f348b7de322edc7befb8e3825d6a7ff82d40e840855f64abecd90b978
-
Size
188KB
-
MD5
e3a513531b2882a4f1365b6939a84d54
-
SHA1
2b01302ffcc3ca83db1b1ee9b4dda4dfbd7762f6
-
SHA256
c5dda69f348b7de322edc7befb8e3825d6a7ff82d40e840855f64abecd90b978
-
SHA512
307be53056779639ef19e3ee7e33f2fee048003bff56573403e4fadf79ce527dedb8459e37a6da3486cb2699fe953944ce8303d8c761ef293ceb4371ccaa50dc
-
SSDEEP
3072:992Zysiw0VHL/voxcUtHdd2tPUgNe5zUs/rs9Ejy9sy/tyDT1Yqq1a5h8zxvbO9b:3oyaMHTvoqUlyiUszsWjy9URYHZVvbO9
Malware Config
Signatures
Files
-
c5dda69f348b7de322edc7befb8e3825d6a7ff82d40e840855f64abecd90b978.exe windows x86
8f81fe02313ddfdd375547282d1fbfa0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmAssociateContext
kernel32
SetEvent
Sleep
SetProcessAffinityMask
GetCurrentProcessId
GetStringTypeA
InterlockedDecrement
SetStdHandle
MoveFileW
CreateProcessW
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetCurrentThreadId
FreeEnvironmentStringsA
GetACP
LCMapStringA
TerminateThread
WriteFile
OutputDebugStringW
GetModuleFileNameW
WriteConsoleA
SetEndOfFile
EnumResourceTypesA
LCMapStringW
ReadFile
CreateFileA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
QueryPerformanceCounter
WaitForMultipleObjects
GlobalLock
GetEnvironmentStringsW
WaitNamedPipeA
GetConsoleOutputCP
InterlockedIncrement
CreateEventW
DeleteCriticalSection
IsValidCodePage
GetCPInfo
LoadLibraryA
GetLocalTime
WaitForSingleObject
FreeEnvironmentStringsW
WriteConsoleW
GetOEMCP
CreateFileW
GlobalAlloc
GlobalUnlock
ole32
CoMarshalHresult
CoCreateInstance
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoQueryProxyBlanket
CoInitializeSecurity
CoTaskMemFree
StringFromGUID2
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ