Static task
static1
Behavioral task
behavioral1
Sample
f8e57668e33358bb041d377c6e929230551e6cf3afb1485783ce7fde8fa0e524.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8e57668e33358bb041d377c6e929230551e6cf3afb1485783ce7fde8fa0e524.exe
Resource
win10v2004-20220901-en
General
-
Target
f8e57668e33358bb041d377c6e929230551e6cf3afb1485783ce7fde8fa0e524
-
Size
811KB
-
MD5
f5823ec98b1f342753991264d0865a2b
-
SHA1
9ce47608ef590f08ec74953446d2a441654c9c1e
-
SHA256
f8e57668e33358bb041d377c6e929230551e6cf3afb1485783ce7fde8fa0e524
-
SHA512
acca5052e1e51fcb57707afe3c7440edd0364a7873410c4efe3ffafbb7e76976ee236dbc28e891612edd00601039542afb8390dc7da7e8174edd2ac4a31382c1
-
SSDEEP
12288:ZHrrxS/WJ1iCP2g7NN1W1XuiRGcz00tnHxEdCt/ohz60Iq4ABfTJ1FYJ+JNwnwAx:Vr2FUNq+iRd0OHxD06paJ1FY04nx
Malware Config
Signatures
Files
-
f8e57668e33358bb041d377c6e929230551e6cf3afb1485783ce7fde8fa0e524.exe windows x86
b236371757c4737b72bb5dd2a783b3e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
VirtualProtectEx
InitializeCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetConsoleMode
GetCalendarInfoW
GetDriveTypeA
Sleep
GetLocalTime
FindClose
CreateDirectoryW
GetModuleFileNameA
WriteConsoleW
EnterCriticalSection
DeleteFileA
lstrlenW
TlsGetValue
GetFileSize
GetTickCount
RemoveDirectoryA
GlobalFree
GetStartupInfoA
CloseHandle
GetCommandLineW
user32
IsWindowEnabled
wsprintfA
IsWindowVisible
IsWindow
FillRect
DispatchMessageA
PeekMessageA
GetWindowDC
GetSysColor
EqualRect
MessageBoxA
GetWindowLongA
GetWindowLongA
cryptdlg
CertConfigureTrustA
CertTrustCertPolicy
CertTrustCleanup
CertConfigureTrustW
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE