Static task
static1
Behavioral task
behavioral1
Sample
1c5d232cb1fc8b16d2e405d5a582aa894c80c2083fc930e0a5d934af15073c5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c5d232cb1fc8b16d2e405d5a582aa894c80c2083fc930e0a5d934af15073c5c.exe
Resource
win10v2004-20220901-en
General
-
Target
1c5d232cb1fc8b16d2e405d5a582aa894c80c2083fc930e0a5d934af15073c5c
-
Size
127KB
-
MD5
8083a419cad9ec1b5b087e8c438dc8c3
-
SHA1
e8dbfb47efedde67c909d0f9456cb2f1200362c7
-
SHA256
1c5d232cb1fc8b16d2e405d5a582aa894c80c2083fc930e0a5d934af15073c5c
-
SHA512
201083112124d1b124dec984db846bf0a554fc223713a3266b0585a5b36bd9bd851f88eb756117444386a54b91f4caf571ccdba8eee27284c93866e33fcc2fef
-
SSDEEP
3072:wkB2AJ7ehdScE1oAJcDDb576/cihqo+0q3hkF3e:nejOoXrV6/JmRkhe
Malware Config
Signatures
Files
-
1c5d232cb1fc8b16d2e405d5a582aa894c80c2083fc930e0a5d934af15073c5c.exe windows x86
9c1d0fb955a9a4c70149aa940e342021
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
LocalFree
lstrcpynW
FormatMessageW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
lstrcmpW
ReadFile
SetFilePointer
ExitProcess
RtlUnwind
GetCommandLineA
shell32
ShellExecuteExW
shlwapi
SHDeleteKeyW
PathCombineW
ole32
CoRevokeClassObject
CoQueryProxyBlanket
CoReleaseMarshalData
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
Sections
.text Size: 56KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ