Static task
static1
Behavioral task
behavioral1
Sample
5b0e9dafde1c4e494f9bcee83a4a503d8208fa590bb838db0f904769f1e4f282.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b0e9dafde1c4e494f9bcee83a4a503d8208fa590bb838db0f904769f1e4f282.exe
Resource
win10v2004-20220901-en
General
-
Target
5b0e9dafde1c4e494f9bcee83a4a503d8208fa590bb838db0f904769f1e4f282
-
Size
326KB
-
MD5
5f653eb47b2375cf0f9eabc9c44741f3
-
SHA1
b75eb6afbcf1c03c5ba987e22f9c2f533f20062e
-
SHA256
5b0e9dafde1c4e494f9bcee83a4a503d8208fa590bb838db0f904769f1e4f282
-
SHA512
926c74fe047a5d102660dde72b5cd77f9bc6b788ae5dd3961e7625941031b9f36d0678d92fd66bf2fe0cb03af41716458f449b8f388afd2766523c6e859710bf
-
SSDEEP
6144:YqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:SO1xm+QoK0t4K3gCTDYWGrYzt+NST
Malware Config
Signatures
Files
-
5b0e9dafde1c4e494f9bcee83a4a503d8208fa590bb838db0f904769f1e4f282.exe windows x86
8743076dd08ef1894e53c7d247d4ea13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetModuleHandleA
GetTickCount
CloseHandle
Sleep
LoadLibraryW
GetCommandLineW
GetComputerNameA
FindVolumeClose
lstrlenA
HeapCreate
GetDiskFreeSpaceA
LocalUnlock
LocalFree
ResetEvent
CreateFileA
GetDateFormatA
UnmapViewOfFile
SetLastError
GetSystemTime
user32
CheckRadioButton
IsWindow
GetDC
CallWindowProcA
GetDlgItem
CreateWindowExA
DispatchMessageA
DrawStateA
DrawMenuBar
GetComboBoxInfo
SetFocus
FillRect
DrawEdge
advapi32
IsTokenUntrusted
FreeSid
RegCloseKey
RegDeleteKeyA
RegEnumValueA
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ