Static task
static1
Behavioral task
behavioral1
Sample
5c38e38a7f28797ecbf438a7f4023dcfaaccd3f400d02a2a543740a7fe03b9d6.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5c38e38a7f28797ecbf438a7f4023dcfaaccd3f400d02a2a543740a7fe03b9d6.exe
Resource
win10v2004-20220721-en
General
-
Target
5c38e38a7f28797ecbf438a7f4023dcfaaccd3f400d02a2a543740a7fe03b9d6
-
Size
328KB
-
MD5
6b3bb6ab30945def63d16d3b85184511
-
SHA1
f5b3ddf276d663b1a59cd66a981c1c79e6fcb991
-
SHA256
5c38e38a7f28797ecbf438a7f4023dcfaaccd3f400d02a2a543740a7fe03b9d6
-
SHA512
aacaf7e117e1e77b965b3175914b5388fe78fa2cb910cdfb568eb556f2240b16474a27215e1d925ab58ec0ba496635e0fb9aadb0e157343e195297b08c4f32fe
-
SSDEEP
6144:cBJ3pE73WtFGT0G25lS4bv+r3nzxiag/QJSG2wvq209GxHFUoFY2G:+BeTEMT0Gy+Prg/9tWq9Mqoi
Malware Config
Signatures
Files
-
5c38e38a7f28797ecbf438a7f4023dcfaaccd3f400d02a2a543740a7fe03b9d6.exe windows x86
ce35ec2cf14e54bc87d971ce17cc667d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
SetupInstallServicesFromInfSectionExW
user32
FindWindowW
shell32
Shell_NotifyIconA
kernel32
LoadLibraryW
FreeLibrary
GetExitCodeThread
WaitForSingleObject
CreateThread
SetDefaultCommConfigA
LCMapStringA
CopyFileW
MoveFileWithProgressW
ole32
StgConvertPropertyToVariant
msvcrt
memcmp
mblen
iswalpha
labs
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
acab Size: 4KB - Virtual size: 421B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
abac Size: 4KB - Virtual size: 38B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ