Static task
static1
Behavioral task
behavioral1
Sample
5bad009fdcb205947c4851df5c2c8262c422dd2e865e91de5b70755195b025d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bad009fdcb205947c4851df5c2c8262c422dd2e865e91de5b70755195b025d6.exe
Resource
win10v2004-20220812-en
General
-
Target
5bad009fdcb205947c4851df5c2c8262c422dd2e865e91de5b70755195b025d6
-
Size
768KB
-
MD5
5187fa97ef03af0961f238a1a2694dc4
-
SHA1
1f0919c6853e571181dbfef87551d4548a924a60
-
SHA256
5bad009fdcb205947c4851df5c2c8262c422dd2e865e91de5b70755195b025d6
-
SHA512
897c360cb56692bd3ce392cf271b62f8e9539cb6895fc603055e885e0b2430a2d4d9cdfca99f9770d79aee012452a45e9094d2aeb082a7fed3937253a5da283e
-
SSDEEP
12288:ZLCcUfzSSfmck4cUK0WqVtaI1UHNc2SEJHiiRP2TG8LTOqGRgnhy4x:dCcU7DkCK5eh1Uy2SMjAGRUy4x
Malware Config
Signatures
Files
-
5bad009fdcb205947c4851df5c2c8262c422dd2e865e91de5b70755195b025d6.exe windows x86
194f35e1e6f279c9c1dc0c83a9be3dd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetCurrentProcessId
GetTickCount
GetLastError
GetCurrentThread
GetModuleHandleA
GetCommandLineA
GetCurrentThreadId
ExitProcess
VirtualAlloc
GetOEMCP
WriteFile
HeapCreate
CreateProcessA
GetACP
CloseHandle
SetFilePointer
TlsFree
RaiseException
GetCPInfo
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GlobalFree
lstrlenA
LCMapStringW
InterlockedIncrement
CreateFileA
GetFileType
CreateEventA
CreateFileW
lstrcpyA
FindNextFileW
GetProcessHeap
GetProcAddress
DeleteFileA
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
GetLocaleInfoA
VirtualQuery
TerminateProcess
GetSystemDirectoryA
SetUnhandledExceptionFilter
MultiByteToWideChar
TlsGetValue
HeapAlloc
GetModuleFileNameW
FormatMessageA
InterlockedDecrement
FindClose
InitializeCriticalSection
SetEvent
SetFileAttributesA
GetStringTypeW
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
GetCurrentProcess
WaitForSingleObject
FileTimeToSystemTime
GetConsoleOutputCP
GetStdHandle
user32
SetCursor
IsWindowVisible
ScreenToClient
GetDlgItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
ReleaseDC
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
TranslateMessage
EnableWindow
ShowWindow
DefWindowProcA
DestroyWindow
GetClientRect
GetCursorPos
GetDC
EndPaint
IsWindow
SetWindowPos
SetForegroundWindow
Sections
.text Size: 726KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ