Static task
static1
Behavioral task
behavioral1
Sample
05b87d9a63d1f1ad2126a7f23a6e3b111a2752b774c7ca1395d6b18befd238e9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
05b87d9a63d1f1ad2126a7f23a6e3b111a2752b774c7ca1395d6b18befd238e9.exe
Resource
win10v2004-20220812-en
General
-
Target
05b87d9a63d1f1ad2126a7f23a6e3b111a2752b774c7ca1395d6b18befd238e9
-
Size
520KB
-
MD5
1ba494d505181082054d2759c63109e0
-
SHA1
c0be00a56a275fbcfbc64424b66970da5eeedc7a
-
SHA256
05b87d9a63d1f1ad2126a7f23a6e3b111a2752b774c7ca1395d6b18befd238e9
-
SHA512
320a7820726d5aea57706b769af12855bbbd1efaee8b0c418c67478b2dbae4f0f7e19068b21a6702274bec22daeb1f9fc9976fcebeb9b00be4a4bcd9a43637d5
-
SSDEEP
12288:NjJQhBKYScw3Zb2yRYTXKHF2VxqHjdj+:JwBKYsZbBOXKHF2HKdj
Malware Config
Signatures
Files
-
05b87d9a63d1f1ad2126a7f23a6e3b111a2752b774c7ca1395d6b18befd238e9.exe windows x86
c8c1f0edec52f92caab088022e96d3c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsIconic
GetMessageA
BeginPaint
GetWindowRect
LoadStringA
CallWindowProcA
TranslateMessage
GetDC
GetWindowLongA
InvalidateRect
EnableWindow
kernel32
DeleteFileA
GetProcessHeap
HeapAlloc
LocalAlloc
GetLastError
HeapFree
GetStdHandle
SetHandleCount
FileTimeToSystemTime
GlobalFree
WaitForSingleObject
GetVersionExW
InterlockedIncrement
HeapCreate
VirtualAlloc
GetCurrentThreadId
ExitProcess
FormatMessageA
FindClose
CreateEventA
VirtualFree
GlobalAlloc
LoadResource
InitializeCriticalSection
RemoveDirectoryA
TerminateProcess
SetEvent
GetModuleHandleW
HeapReAlloc
GetACP
GetFileAttributesW
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
FindNextFileW
GetModuleHandleA
GetStringTypeA
MapViewOfFile
RaiseException
SetFilePointer
GetProcAddress
GetModuleFileNameA
HeapSize
SetErrorMode
UnhandledExceptionFilter
GetOEMCP
GetCurrentProcessId
GetLocaleInfoA
GetConsoleMode
GetStartupInfoA
DeleteCriticalSection
FreeLibrary
GetLocalTime
lstrlenW
VirtualQuery
LoadLibraryA
FlushFileBuffers
GetEnvironmentStringsW
TlsAlloc
GetTickCount
SetCurrentDirectoryA
QueryPerformanceCounter
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
Sections
.text Size: 460KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ