Static task
static1
Behavioral task
behavioral1
Sample
5f6bd3dda6d685020011c7bb5e0f35480a56918abfd473ad31337366358f0ce7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f6bd3dda6d685020011c7bb5e0f35480a56918abfd473ad31337366358f0ce7.exe
Resource
win10v2004-20220812-en
General
-
Target
5f6bd3dda6d685020011c7bb5e0f35480a56918abfd473ad31337366358f0ce7
-
Size
269KB
-
MD5
d19d371ca8217db23386f337ee2eb7b8
-
SHA1
56f5a4ab53a1290c979d1be38f94ecff4c2c620f
-
SHA256
5f6bd3dda6d685020011c7bb5e0f35480a56918abfd473ad31337366358f0ce7
-
SHA512
464a5f197c7207ecf89dc5aca7c8f6eca1dd71efc2c25bd10122d674d3c38b29c1e2a5e777908cf527d94cbb0fbe42c127d615885a58f1aeebe9e87438679ce6
-
SSDEEP
6144:MZcT6nzQPSqzXX2ydn3nozW5TFYkI4uLZMZ:MWT6zQPRHbdn34y3Ibc
Malware Config
Signatures
Files
-
5f6bd3dda6d685020011c7bb5e0f35480a56918abfd473ad31337366358f0ce7.exe windows x86
ae13560a5c5666011a328fe61595de59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetCommandLineA
user32
InvalidateRect
GetDC
ReleaseDC
BeginPaint
LoadCursorA
SetCursor
ShowCursor
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
gdi32
SetPixel
LineTo
GetStockObject
advapi32
RegOpenKeyA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.z2 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z3 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.z Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ