Static task
static1
Behavioral task
behavioral1
Sample
a545782a5d6e99834de37a528fae8f2450a7fd7f465b5c14d8b69500b4a74edc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a545782a5d6e99834de37a528fae8f2450a7fd7f465b5c14d8b69500b4a74edc.exe
Resource
win10v2004-20220812-en
General
-
Target
a545782a5d6e99834de37a528fae8f2450a7fd7f465b5c14d8b69500b4a74edc
-
Size
284KB
-
MD5
7315d5deed5adc208317bf371b420a43
-
SHA1
e7af1e82c6e1e3ce9b8ac0da492348ca81e02bd5
-
SHA256
a545782a5d6e99834de37a528fae8f2450a7fd7f465b5c14d8b69500b4a74edc
-
SHA512
ff8fac22be56ec1b4cac5f85d3f1b8a94ab7dad7954b211193263bcec8495daa5c918afa482ea0d3fdcdc1ea7c296567445bce54fa2f972fed172d3821758ab7
-
SSDEEP
3072:gSBUxhGzSSXpZZ4WSpSSqV1JKCuOVjWWBlzum7IsHl2ymQxzon4GNv3gNXhw5uu:/UxAjpZZ49NqVUOkiuMlRlRDu
Malware Config
Signatures
Files
-
a545782a5d6e99834de37a528fae8f2450a7fd7f465b5c14d8b69500b4a74edc.exe windows x86
e50cb14ed3686ef849ebf67afbdc6cd9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
FindFirstFileA
FindClose
GetACP
GetVersionExA
GetComputerNameW
GetLocaleInfoA
GetProcessHeap
GetTickCount
DeviceIoControl
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
QueryPerformanceCounter
VirtualFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
ExitProcess
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetCPInfo
RaiseException
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetDriveTypeA
FlushFileBuffers
SetEndOfFile
Sleep
CreateFileA
GetVersion
TerminateProcess
SetFileTime
GetFileTime
GetSystemDirectoryA
ReadFile
GetFileSize
GetLastError
WriteFile
SetFilePointer
GetCurrentProcessId
CloseHandle
WaitForSingleObject
CreateSemaphoreA
FreeLibrary
GetProcAddress
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
HeapCreate
HeapFree
HeapAlloc
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
GetSystemTimeAsFileTime
user32
LoadStringA
wsprintfA
TranslateMessage
GetMessageA
GetKeyboardLayout
MapVirtualKeyExA
MapVirtualKeyA
EnumDisplaySettingsA
wsprintfW
GetKeyNameTextA
DispatchMessageA
advapi32
GetUserNameA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocString
SysAllocStringLen
VariantInit
SysFreeString
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ