Static task
static1
Behavioral task
behavioral1
Sample
5f937d6769e5bde61644e00bf884cac3e8c1c9a9e76667f09c1ded8c86633a2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f937d6769e5bde61644e00bf884cac3e8c1c9a9e76667f09c1ded8c86633a2c.exe
Resource
win10v2004-20220812-en
General
-
Target
5f937d6769e5bde61644e00bf884cac3e8c1c9a9e76667f09c1ded8c86633a2c
-
Size
139KB
-
MD5
df0d84406593cc0a7f97f2b5b1b3ba48
-
SHA1
f74f80eac2b6e4bf467895e7cdc24dbbe859fcb3
-
SHA256
5f937d6769e5bde61644e00bf884cac3e8c1c9a9e76667f09c1ded8c86633a2c
-
SHA512
fe104023164dd63963425ae9c29b93ac49efe2a6871c88241dca4f76b0ee79c84b8b481ef35dde05f6e5ccbf8b348bab6c73b06e1b4f6522e8268ffa0fef4601
-
SSDEEP
3072:4r7JDa7lU+DUtQwuGu8wkvmvK39oWSAxI8N9CurRqHK:4Nqa+DUVuZ8wkvmXW3IypEHK
Malware Config
Signatures
Files
-
5f937d6769e5bde61644e00bf884cac3e8c1c9a9e76667f09c1ded8c86633a2c.exe windows x86
282de8aace4fdf5ba1fa36ea6fbaa870
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHLoadInProc
DragQueryFileW
ShellAboutA
ShellHookProc
comctl32
ImageList_LoadImageW
ImageList_Write
CreateStatusWindowW
ImageList_DrawEx
ntdll
LdrLockLoaderLock
LdrSetDllManifestProber
LdrShutdownThread
NtAlertThread
NtClearEvent
kernel32
DeleteFileW
CreateMutexW
WriteTapemark
CreateFileW
Sections
.text Size: 64KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE