Static task
static1
Behavioral task
behavioral1
Sample
c41db5500d27d8bf35565f76ce69963dd7f8f4edd9b6af2972fcfaad8651a526.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c41db5500d27d8bf35565f76ce69963dd7f8f4edd9b6af2972fcfaad8651a526.exe
Resource
win10v2004-20220812-en
General
-
Target
c41db5500d27d8bf35565f76ce69963dd7f8f4edd9b6af2972fcfaad8651a526
-
Size
908KB
-
MD5
62e1b581f6a792fa9808e1d5b1513afe
-
SHA1
d9734740a23e873733b206954809a4fd78535dc6
-
SHA256
c41db5500d27d8bf35565f76ce69963dd7f8f4edd9b6af2972fcfaad8651a526
-
SHA512
86d463a4bd68d09a9d50cf5a4d47b7137a95e9d7160277c4975a399efb35576903d564a3528ea80adb21404154ee48395eec4c2dc0a8a08e113f0ea26242c4b5
-
SSDEEP
12288:RtvppTRjNndimVKJeqFQpkelYOADc8DoGyjm3qGyvlv3v307XU6B16mnqXk6dtY2:JjNdizluJlR8s8XAlnQE63Fnq7Y2
Malware Config
Signatures
Files
-
c41db5500d27d8bf35565f76ce69963dd7f8f4edd9b6af2972fcfaad8651a526.exe windows x86
b205cd0f8b07329c26f5fa183cd5c05f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetLastError
GetModuleHandleA
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetCurrentThreadId
GetCurrentThread
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
SizeofResource
GetModuleHandleW
GetACP
FindFirstFileA
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetEnvironmentStrings
GetThreadLocale
GlobalFree
GetSystemInfo
LCMapStringW
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateFileW
CompareStringA
FindNextFileW
GetProcAddress
DeleteFileA
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
LeaveCriticalSection
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
SetFilePointer
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
IsDebuggerPresent
TlsGetValue
SetLastError
FormatMessageA
InterlockedDecrement
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
LockResource
WaitForSingleObject
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
user32
SetCursor
GetClientRect
SystemParametersInfoA
MessageBoxA
MoveWindow
MessageBeep
GetSystemMenu
LoadCursorA
GetDlgItem
SetTimer
GetWindowLongA
SetWindowTextA
SetWindowLongA
ReleaseCapture
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
SetFocus
CreateWindowExA
GetSubMenu
LoadStringA
PeekMessageA
EnableWindow
DestroyWindow
SendMessageA
DrawTextA
GetDC
SetForegroundWindow
Sections
.text Size: 880KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ