Static task
static1
Behavioral task
behavioral1
Sample
5639d9fd8532e0d385dc53bc518360a64029ebd13b83324181c2578aa5a8f9bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5639d9fd8532e0d385dc53bc518360a64029ebd13b83324181c2578aa5a8f9bd.exe
Resource
win10v2004-20221111-en
General
-
Target
5639d9fd8532e0d385dc53bc518360a64029ebd13b83324181c2578aa5a8f9bd
-
Size
49KB
-
MD5
1758a9be2d224623a51871dbf2403bf0
-
SHA1
320e1c6f7ac0ef32c95419992a7ac06f90845340
-
SHA256
5639d9fd8532e0d385dc53bc518360a64029ebd13b83324181c2578aa5a8f9bd
-
SHA512
beb92b7d977b0bdc51b50ddcdc6449808df46ecccb719d280ed0b47dfbb820da27c2917ebcaf64103c4a0610f4a2e1f1ca6e3a202adab984c58e3385d305b36e
-
SSDEEP
384:XgtCIKJbqX10XDrjbxq2hxs4M9gym5bfaAD3H0zYiwHCFn1el9TSs3JBWL/P:XgL1wX+h9ipfaADEzxQSs30n
Malware Config
Signatures
Files
-
5639d9fd8532e0d385dc53bc518360a64029ebd13b83324181c2578aa5a8f9bd.exe windows x86
7e0f82c35addda31e724d40239ab8158
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
strlen
strcpy
strcat
memcpy
strncpy
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
GetProcAddress
GetSystemDirectoryA
CreateSemaphoreA
GetLastError
GetComputerNameA
GetDriveTypeA
BeginUpdateResourceA
EndUpdateResourceA
GetCommandLineA
HeapDestroy
ExitProcess
LoadLibraryExA
EnumResourceTypesA
FreeLibrary
FindResourceA
LoadResource
LockResource
SizeofResource
UpdateResourceA
EnumResourceNamesA
CreateProcessA
GetThreadContext
VirtualAllocEx
SetThreadContext
ResumeThread
TerminateProcess
CloseHandle
GetTempPathA
GetTempFileNameA
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
GetVersionExA
LoadLibraryA
DeleteCriticalSection
CreateThread
GetCurrentThreadId
Sleep
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
HeapFree
FindFirstFileA
FindClose
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteFileA
CopyFileA
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetLocalTime
WriteFile
ReadFile
GetFileSize
SetFilePointer
TlsGetValue
TlsSetValue
TlsAlloc
HeapReAlloc
WaitForMultipleObjects
GetCurrentThread
ReleaseSemaphore
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteExA
Sections
.code Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ