Static task
static1
Behavioral task
behavioral1
Sample
5882963e6b822c3ba652932c9195ccda5ea4a7106855f4ba06e437646b7f7f7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5882963e6b822c3ba652932c9195ccda5ea4a7106855f4ba06e437646b7f7f7d.exe
Resource
win10v2004-20221111-en
General
-
Target
5882963e6b822c3ba652932c9195ccda5ea4a7106855f4ba06e437646b7f7f7d
-
Size
179KB
-
MD5
0b43e253960b7c2244ee8016086eaa40
-
SHA1
fba26a42e8ce86f9cf5f54d345a10e9d3d21b2d2
-
SHA256
5882963e6b822c3ba652932c9195ccda5ea4a7106855f4ba06e437646b7f7f7d
-
SHA512
86874924c7a6498cb964deaf7ba909be3638b1ef6e60a73877162993137ea2758b26b458d635ce376b9a6503311c9638dcac9ec1be14384636dcb86132988e34
-
SSDEEP
3072:67o5SLtXp0Xx3EbYsz0W7TA4oS7oft4IlxfMa24ZWK54WXqWbaZDu5oMhGuim:7ot50qzNA4Sft4wfHp1qWaZC9QuL
Malware Config
Signatures
Files
-
5882963e6b822c3ba652932c9195ccda5ea4a7106855f4ba06e437646b7f7f7d.exe windows x86
22cd3e7308c75b99b6412aa1d782cc67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemCodePagesA
ReadConsoleW
GetTapePosition
GetModuleFileNameA
SwitchToFiber
SetVolumeLabelW
SetFilePointer
Sleep
LoadLibraryExW
FreeEnvironmentStringsA
GetCompressedFileSizeW
MoveFileExA
GetModuleHandleA
GetTimeFormatA
SetComputerNameW
ReadConsoleOutputW
CreateTapePartition
Toolhelp32ReadProcessMemory
HeapSize
ReadConsoleInputW
lstrlenA
VirtualProtect
LocalFileTimeToFileTime
FindFirstFileExA
PurgeComm
CancelIo
IsBadCodePtr
QueryInformationJobObject
SetThreadAffinityMask
Process32NextW
RaiseException
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
VirtualAlloc
GetProcAddress
GetTimeZoneInformation
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
SetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetFileType
GetLastError
MoveFileA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
CompareStringA
CompareStringW
HeapReAlloc
HeapAlloc
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
user32
CopyImage
DdeGetData
CloseDesktop
SetWindowTextW
GetTitleBarInfo
SetMenuItemInfoW
GetAncestor
LoadBitmapA
GetMenuStringW
IntersectRect
CreateIcon
FreeDDElParam
RegisterWindowMessageW
DrawIcon
IMPQueryIMEA
IsCharAlphaA
LoadStringA
IsCharAlphaNumericA
ModifyMenuW
UpdateWindow
CharLowerW
SwitchDesktop
ReleaseDC
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE