Static task
static1
Behavioral task
behavioral1
Sample
5c0ae01423cef08307370be39ad8c8b77424b4d189f35f80188e31650f06ef4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c0ae01423cef08307370be39ad8c8b77424b4d189f35f80188e31650f06ef4b.exe
Resource
win10v2004-20221111-en
General
-
Target
5c0ae01423cef08307370be39ad8c8b77424b4d189f35f80188e31650f06ef4b
-
Size
236KB
-
MD5
154f9fae88242fcda7419563fef7e8f0
-
SHA1
6d20ba6ee4b652ab9188d7b6cf10c2616bd953f3
-
SHA256
5c0ae01423cef08307370be39ad8c8b77424b4d189f35f80188e31650f06ef4b
-
SHA512
3a07ba04191802f7a5695bc87ad41f06e8d02db3adab1466da5456fb5cac6463acd00337a2ffff669f4146690b85be9a0382b2500ab2e04deebc4fef501fdbeb
-
SSDEEP
6144:BsRp6X1HlokmC/VPi/oQPpExIoThRfTem0QWT2taaEwFQpT:2RKVV/VPzQqxI6h9CbHaNQR
Malware Config
Signatures
Files
-
5c0ae01423cef08307370be39ad8c8b77424b4d189f35f80188e31650f06ef4b.exe windows x86
7194594764287fa82cc5d5a7408979b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
GetEnvironmentStringsW
WaitForMultipleObjectsEx
CloseHandle
AreFileApisANSI
FormatMessageA
GetProcAddress
CreateThread
GetLogicalDrives
GetStdHandle
RaiseException
SetEndOfFile
TerminateProcess
GetVersion
GetSystemTimeAsFileTime
Sleep
GetCurrentProcess
CreateFileMappingA
IsProcessorFeaturePresent
SetEnvironmentVariableA
WinExec
LoadLibraryA
FileTimeToDosDateTime
WaitForSingleObject
SystemTimeToFileTime
InterlockedExchangeAdd
FlushFileBuffers
GetCommandLineA
VirtualProtect
VirtualAlloc
EnumResourceNamesA
EnterCriticalSection
ExitProcess
GetModuleHandleA
GetStartupInfoA
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
RegCloseKey
RegOpenKeyW
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ