Static task
static1
Behavioral task
behavioral1
Sample
5B3A.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5B3A.exe
Resource
win10v2004-20220812-en
General
-
Target
5B3A.tmp
-
Size
14KB
-
MD5
294e9f64cb1642dd89229fff0592856b
-
SHA1
97b148c27f3da29ba7b18d6aee8a0db9102f47c9
-
SHA256
917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
-
SHA512
b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf
-
SSDEEP
384:5cFP7VtpK4p+31Mzh79W5vM+ZyUgGq4BtMvAxXCRsi:A7Vf9p+qQ02y5HW6kX
Malware Config
Signatures
Files
-
5B3A.tmp.exe windows x86
ada35efe10769be0eeaecfd618fe6e7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontW
TextOutW
SetTextColor
SelectObject
GetTextColor
GetTextCharset
CreateDIBitmap
user32
CreateWindowExW
DefWindowProcW
GetWindowTextW
LoadMenuW
kernel32
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ