Static task
static1
Behavioral task
behavioral1
Sample
58b0e6b10a5daf3f2963029fbe203fd3802a8af467041d5ebdd53e00dbf9cf53.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58b0e6b10a5daf3f2963029fbe203fd3802a8af467041d5ebdd53e00dbf9cf53.exe
Resource
win10v2004-20220812-en
General
-
Target
58b0e6b10a5daf3f2963029fbe203fd3802a8af467041d5ebdd53e00dbf9cf53
-
Size
60KB
-
MD5
d303a40ac9c9af1116743ae257630a59
-
SHA1
d35b0935df7d5701faeecf2f77fd0a7cd548aa2c
-
SHA256
58b0e6b10a5daf3f2963029fbe203fd3802a8af467041d5ebdd53e00dbf9cf53
-
SHA512
11620519928fcd523a88e3735c499d0fe1cd6271e36e5433de03e8e6aa20b9edcfa206a7840ac1437b8115e949b56460fd1821b6b5fc16808d21786e0d2d5609
-
SSDEEP
768:BGkRYY4V30T0pocoKTc1LiE7FjIoMc4sUX47iB9/xw6HOYVu1sf:BG2YYbVhKTCZ7F8oM0UnO/Vs
Malware Config
Signatures
Files
-
58b0e6b10a5daf3f2963029fbe203fd3802a8af467041d5ebdd53e00dbf9cf53.exe windows x86
0e7d017cf1dc3100f0bde6737916444d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
lstrcpyA
CloseHandle
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
FreeLibrary
LoadLibraryExA
Sleep
MoveFileA
lstrlenA
GetModuleFileNameA
GetTempFileNameA
FindNextFileA
FindFirstFileA
GetFileAttributesA
lstrcmpiA
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
ReadFile
SetFilePointer
WriteFile
CopyFileA
DeleteFileA
LoadLibraryA
GetLastError
HeapAlloc
HeapFree
GetDriveTypeA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
FindClose
WideCharToMultiByte
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
shlwapi
StrStrIA
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE