Static task
static1
Behavioral task
behavioral1
Sample
1d5ad0c05e415f350d53f5bb55bac58325d08b9159e99f76614cf0c22b18244c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1d5ad0c05e415f350d53f5bb55bac58325d08b9159e99f76614cf0c22b18244c.exe
Resource
win10v2004-20221111-en
General
-
Target
1d5ad0c05e415f350d53f5bb55bac58325d08b9159e99f76614cf0c22b18244c
-
Size
164KB
-
MD5
cc4664eb7e09bbc5316a230375b6e3fa
-
SHA1
72a4641073ba7d10f577073952de4c2977b56e9f
-
SHA256
1d5ad0c05e415f350d53f5bb55bac58325d08b9159e99f76614cf0c22b18244c
-
SHA512
eef42e7745a076e21493f547ca4d3ccf63ce380f6282ca477ce202d495f6d3feaa7096687bdeb169cae6fc04c9ddaceb79c97604a4c5e8557cb0cd8a368ccb6d
-
SSDEEP
3072:2QmHql+DCmOIdpzDh2L7FLZcsd4Eqx+gQeb4rSHLe+fMKv5DNX:KHqlnmOeN10ZctxaxOHFj59
Malware Config
Signatures
Files
-
1d5ad0c05e415f350d53f5bb55bac58325d08b9159e99f76614cf0c22b18244c.exe windows x86
b0db0c86db2ec20b6a393d6dda713506
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileExA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
user32
PeekMessageW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
StgOpenStorageEx
oleaut32
GetActiveObject
SafeArraySetRecordInfo
VarI1FromDec
VariantInit
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ