Static task
static1
Behavioral task
behavioral1
Sample
5b99daa58d2f59f7066c1d0ce82884217e3ad693d6f5f26ed351f96754a790cb.exe
Resource
win7-20220414-en
General
-
Target
5b99daa58d2f59f7066c1d0ce82884217e3ad693d6f5f26ed351f96754a790cb
-
Size
424KB
-
MD5
a0c729c01ea861b5a20294303a612b9f
-
SHA1
ae122915a28c02908e1088670914962b827c42e0
-
SHA256
5b99daa58d2f59f7066c1d0ce82884217e3ad693d6f5f26ed351f96754a790cb
-
SHA512
976ec722e3c459b5a7158a9b5fc5414b7d40b5ad636e3b1cac8b3911f5b2cf2ccb8fa0c87d5c384f4d8bca5f564d44e178a0e6e491055d470ae95d333a568a6a
-
SSDEEP
6144:XWr/Zk+YqAipOQkh+y5NT+rtdLkA42HHiptpz4nrIBIdP1FD+k0lXIFjIiNj4unc:XWrxk+3OQPPlky63kQu0mfAok/Oa
Malware Config
Signatures
Files
-
5b99daa58d2f59f7066c1d0ce82884217e3ad693d6f5f26ed351f96754a790cb.exe windows x86
fb6fb94e4b762fed1b02b86bf34a8b0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
InterlockedDecrement
GetProcAddress
GetModuleHandleA
GetEnvironmentStringsW
CreateEventA
GetACP
GetCommandLineA
GetCPInfoExW
GetUserDefaultLangID
GetLastError
GetConsoleWindow
GetProcessHeap
lstrlenW
ExitProcess
LCMapStringW
CreateThread
GetOEMCP
CloseHandle
InterlockedExchangeAdd
MultiByteToWideChar
FormatMessageW
GetCommandLineW
GetStdHandle
InterlockedExchange
GetTickCount
CreateMutexA
GetStartupInfoA
user32
LoadBitmapA
LoadCursorFromFileA
GetWindow
ShowWindow
winscard
SCardConnectA
ole32
OleQueryLinkFromData
OleInitialize
CLSIDFromProgID
CoUninitialize
setupapi
SetupRemoveFromSourceListA
msvcrt
_XcptFilter
_adjust_fdiv
__setusermatherr
_initterm
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__getmainargs
__p__commode
sprintf
memcmp
_exit
_acmdln
exit
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ