Static task
static1
Behavioral task
behavioral1
Sample
c5b7eb9da1ae67456daefc12ba8535dc8ba4281c7d19cb8a3c75e8048846ab40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5b7eb9da1ae67456daefc12ba8535dc8ba4281c7d19cb8a3c75e8048846ab40.exe
Resource
win10v2004-20221111-en
General
-
Target
c5b7eb9da1ae67456daefc12ba8535dc8ba4281c7d19cb8a3c75e8048846ab40
-
Size
729KB
-
MD5
9a9c188c4b008e5f48f7081fb6f7628b
-
SHA1
d390153048a10888cf516da821f8c9e291e03883
-
SHA256
c5b7eb9da1ae67456daefc12ba8535dc8ba4281c7d19cb8a3c75e8048846ab40
-
SHA512
eaa1cee53d5a443e24fcdbd47581196e553f54883a2fa7bfdec2ee2963e8f1372b2b0a655815366e97186e2010d58407f05094c108bf5d233fd08a02c8eea451
-
SSDEEP
12288:cCGYeVabMJUYB+kGamkcD6OHoISodGwuKJwUu1x77cRv/IDiZw68+hBRw+0:FDRbMqY0bAYTGw7K51xHcRXI+OmBB
Malware Config
Signatures
Files
-
c5b7eb9da1ae67456daefc12ba8535dc8ba4281c7d19cb8a3c75e8048846ab40.exe windows x86
528789db74bca77aaa1f74278091e428
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
RegisterClassA
RegisterClassW
SetScrollInfo
WINNLSEnableIME
WaitMessage
SystemParametersInfoA
ToAscii
GetWindowContextHelpId
SetClipboardViewer
GetCursor
RegisterClassExA
LoadIconW
ReleaseCapture
CharUpperBuffW
EnumDisplaySettingsExW
RegisterHotKey
EndDialog
EnumWindows
GetWindowTextW
GetQueueStatus
EndMenu
RegisterWindowMessageW
GetWindowModuleFileNameA
kernel32
CompareStringW
GetCurrentProcess
MapViewOfFile
WideCharToMultiByte
SetLastError
GetStartupInfoA
GetCurrentProcessId
DeleteCriticalSection
QueryPerformanceCounter
LCMapStringA
GetOEMCP
GetEnvironmentStrings
OutputDebugStringW
GetTickCount
SleepEx
FindNextFileW
TlsSetValue
GetStdHandle
TerminateProcess
InterlockedExchange
WriteProfileSectionA
GetCurrentThreadId
HeapFree
RtlUnwind
GetConsoleCP
VirtualFree
GetDateFormatA
HeapValidate
HeapDestroy
VirtualQuery
ExitProcess
IsValidCodePage
GetProcAddress
SetStdHandle
GetUserDefaultLCID
SetHandleCount
LoadLibraryA
ReadFile
GetCommandLineW
GetLocaleInfoW
lstrlenA
GetSystemTimeAsFileTime
CopyFileExA
OutputDebugStringA
EnumSystemLocalesA
TransactNamedPipe
GetACP
GetEnvironmentStringsW
LoadLibraryExA
FlushFileBuffers
HeapReAlloc
MoveFileW
WriteConsoleA
ReadConsoleInputA
LeaveCriticalSection
FreeEnvironmentStringsA
OpenMutexA
TlsGetValue
WriteFile
OpenProcess
InitializeCriticalSection
CreateMailslotA
CreateFileA
GetStringTypeW
MultiByteToWideChar
RaiseException
LoadLibraryW
InterlockedDecrement
DebugBreak
GetLastError
GetModuleHandleA
GetConsoleMode
GetCPInfo
IsValidLocale
IsBadReadPtr
SetEnvironmentVariableA
FreeLibrary
EnterCriticalSection
SetFilePointer
SetConsoleCtrlHandler
CloseHandle
GetFileType
GetCurrentThread
GlobalAddAtomA
LCMapStringW
VirtualAlloc
GetTimeFormatA
CompareStringA
HeapCreate
FreeEnvironmentStringsW
SetLocaleInfoA
GetStartupInfoW
GetProcessHeap
GetConsoleOutputCP
TlsAlloc
GetCommandLineA
TlsFree
IsDebuggerPresent
UnhandledExceptionFilter
WriteConsoleW
GetModuleFileNameW
SetUnhandledExceptionFilter
InterlockedIncrement
UnlockFile
GetTimeZoneInformation
GetVersionExA
HeapAlloc
GetStringTypeA
CreateMutexA
GetLocaleInfoA
GetModuleFileNameA
shell32
ShellExecuteExW
DragQueryFile
SHGetPathFromIDListW
SHGetSpecialFolderPathW
Sections
.text Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ