Static task
static1
Behavioral task
behavioral1
Sample
95c5ca5cbd2e5c9fc5bfa43f00268bd61df5f6b68bbf3cd0f269d6cceeffa11a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95c5ca5cbd2e5c9fc5bfa43f00268bd61df5f6b68bbf3cd0f269d6cceeffa11a.exe
Resource
win10v2004-20220901-en
General
-
Target
95c5ca5cbd2e5c9fc5bfa43f00268bd61df5f6b68bbf3cd0f269d6cceeffa11a
-
Size
170KB
-
MD5
ba1935636051b2f554c38a1dc908b634
-
SHA1
989173935009ccfd64c324d03fcdb39e8da31418
-
SHA256
95c5ca5cbd2e5c9fc5bfa43f00268bd61df5f6b68bbf3cd0f269d6cceeffa11a
-
SHA512
6c2e8f4ba20966589fda8b18188cb7702ed5983dd6ba1459fe9d98c2230509087824763ef663c6a71cf743eda06811dfb53714bc32c2872d8b716120089faef8
-
SSDEEP
3072:bJ8Ko6+d7Nhn24HXeRzd7Z2j0/RBMNe0ouq+gATcAxnq/rnHzHLY80u:blWdxh24H+p7PMNzv7rTcwn4rTHLAu
Malware Config
Signatures
Files
-
95c5ca5cbd2e5c9fc5bfa43f00268bd61df5f6b68bbf3cd0f269d6cceeffa11a.exe windows x86
ea32615ca4d21ba567cd9e37963fccf9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
MulDiv
DeleteCriticalSection
CloseHandle
FlushFileBuffers
lstrcmpiA
GetStartupInfoA
CreateFileA
LoadLibraryA
AddAtomA
lstrcpynA
GetCPInfo
GetLastError
lstrcmpA
GetFullPathNameA
EnterCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
MultiByteToWideChar
lstrlenA
LCMapStringW
IsBadReadPtr
FindFirstFileA
GetThreadLocale
ReadFile
lstrcpyA
GetOEMCP
GetDiskFreeSpaceA
GetStringTypeA
EnumResourceNamesW
VirtualProtect
GetFileAttributesA
GetProcAddress
LCMapStringA
SetFilePointer
GetStringTypeW
GetModuleHandleA
lstrlenW
LeaveCriticalSection
IsBadCodePtr
FreeLibrary
SetStdHandle
InitializeCriticalSection
WriteFile
GetEnvironmentStringsW
Sleep
GetTickCount
GetEnvironmentStrings
FreeEnvironmentStringsA
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetCurrentThreadId
lstrcatA
RaiseException
Sections
.text Size: 92KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ