Static task
static1
Behavioral task
behavioral1
Sample
5cb5f13c24b9631c14ddb4fe893ff4fad3da3dda8cf353013d4a5ddf09d08f22.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5cb5f13c24b9631c14ddb4fe893ff4fad3da3dda8cf353013d4a5ddf09d08f22.exe
Resource
win10v2004-20220721-en
General
-
Target
5cb5f13c24b9631c14ddb4fe893ff4fad3da3dda8cf353013d4a5ddf09d08f22
-
Size
360KB
-
MD5
85315030e7efbe46eb1318d0bd0a558e
-
SHA1
1ed6de7ca6f0ab330bba35c15301ae0dc5338234
-
SHA256
5cb5f13c24b9631c14ddb4fe893ff4fad3da3dda8cf353013d4a5ddf09d08f22
-
SHA512
6c76e8bff6906c4dea42640849a347161a9d53f6a4ff40efd08aa06a5d2e53b762bdb710e4f53f94025345db2ddceec8f028354a1581774f44a0afd11a553958
-
SSDEEP
6144:TsFsKbrV9s/58VE8pTG1SlCR4BPHMk1N6Prg37UD9+Mv0:TsF5V65mE8FsEQuuQd
Malware Config
Signatures
Files
-
5cb5f13c24b9631c14ddb4fe893ff4fad3da3dda8cf353013d4a5ddf09d08f22.exe windows x86
54589534e5049914c9ab27120e9a80d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CreateProcessAsUserA
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerInstallFileW
GetFileVersionInfoSizeA
msvcrt
_fgetwchar
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_eof
iswlower
_logb
_onexit
__dllonexit
fwrite
_mbscpy
_controlfp
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ