Static task
static1
Behavioral task
behavioral1
Sample
05fb91a419880772e82a26aeaac3746223834f94930d591fd7ac19cd0fe09482.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05fb91a419880772e82a26aeaac3746223834f94930d591fd7ac19cd0fe09482.exe
Resource
win10v2004-20220812-en
General
-
Target
05fb91a419880772e82a26aeaac3746223834f94930d591fd7ac19cd0fe09482
-
Size
750KB
-
MD5
4e6a56ff8c957becc3eb5bf4e58e3f57
-
SHA1
7c18869d0a40323b5dcb1ef996912b2ea7502025
-
SHA256
05fb91a419880772e82a26aeaac3746223834f94930d591fd7ac19cd0fe09482
-
SHA512
83158e59988f4e542e1cc61d216c9062d4c522c825783984a3ac6fcea0e338da529aa67f109868a345d10fcce5ef8b3f0ce81952937d0db261f8229321403fb2
-
SSDEEP
12288:Y/xkZvK9XeOu1VEG+NnmJRDV+BH7bwTGargwsB/gHNQ40QHeqhG/bN8JgvPv4q2n:exWvCeOQVEb6VC7bwxrvsB/gHa4t+TSN
Malware Config
Signatures
Files
-
05fb91a419880772e82a26aeaac3746223834f94930d591fd7ac19cd0fe09482.exe windows x86
4ff2c6c759d5f72b55328f069909e72f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
SetEvent
CloseHandle
SuspendThread
DeleteFileA
CloseHandle
GetTickCount
GetStartupInfoA
GetFileAttributesA
GetModuleHandleA
ExitProcess
HeapCreate
WriteConsoleA
ReleaseMutex
FindVolumeClose
OpenThread
GetEnvironmentVariableW
FindResourceExW
OpenEventW
HeapDestroy
user32
SetFocus
IsZoomed
DispatchMessageA
GetClassInfoA
GetCaretPos
GetSysColor
GetKeyState
DispatchMessageA
FindWindowA
PeekMessageA
GetWindowLongA
CallWindowProcW
GetIconInfo
htui
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ