Static task
static1
Behavioral task
behavioral1
Sample
d5e55ae04280cfad3bbb238cd17c3bdae2d6435f65bcbe2f131a491ce4dc2841.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5e55ae04280cfad3bbb238cd17c3bdae2d6435f65bcbe2f131a491ce4dc2841.exe
Resource
win10v2004-20220812-en
General
-
Target
d5e55ae04280cfad3bbb238cd17c3bdae2d6435f65bcbe2f131a491ce4dc2841
-
Size
160KB
-
MD5
ed1c5ce4532fde4da172b237da950495
-
SHA1
d5e84d1b487817ea8546ab04f445dc4ed1b8bcb0
-
SHA256
d5e55ae04280cfad3bbb238cd17c3bdae2d6435f65bcbe2f131a491ce4dc2841
-
SHA512
7a74cf9174f3a821b7c7e861eb609d73fb47734c926edf8c87ee68a123787a695c489a61684eb01beb88761d3de304701276e38b4dcb8811e5c1f0ad46400737
-
SSDEEP
3072:N/7Ciheefh7ySuhLEGSg+q655U6fcyp9tbOUsnD9RDKgriJJ+y5oz:N/miheWDuhrSg+q+/nhzsnD9R2gra7G
Malware Config
Signatures
Files
-
d5e55ae04280cfad3bbb238cd17c3bdae2d6435f65bcbe2f131a491ce4dc2841.exe windows x86
8a34548082ee1cdf5c8c2a6c4b506664
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetSystemDirectoryA
Sleep
CreateFileA
CloseHandle
GetOEMCP
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
GetLastError
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetProcAddress
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
ReadFile
LoadLibraryA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
user32
MessageBoxA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE