Static task
static1
Behavioral task
behavioral1
Sample
5da76507c793ddb7eceb873ab960fe56389fb9fda11f2ad65013231dcbd6106a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5da76507c793ddb7eceb873ab960fe56389fb9fda11f2ad65013231dcbd6106a.exe
Resource
win10v2004-20220812-en
General
-
Target
5da76507c793ddb7eceb873ab960fe56389fb9fda11f2ad65013231dcbd6106a
-
Size
783KB
-
MD5
67c623315b6fcd1cda919e9ab62b5d00
-
SHA1
31ec1612e05e04c88807419150254d1d703dc1f3
-
SHA256
5da76507c793ddb7eceb873ab960fe56389fb9fda11f2ad65013231dcbd6106a
-
SHA512
78a5975ddb90d8810b1168e93c249a6e266c4174116e936e5863b15b71050842246de5e5a8b0a0e8ef6454e5dbff855227ee75aaef881c2ff787fd63416def56
-
SSDEEP
24576:c0ZFcXNvEo4uNeQ9Vpk10BfgXzR+PHNtX92Y1UKrkh:c0Fc6bUV6uBfpPHV2Y1UE
Malware Config
Signatures
Files
-
5da76507c793ddb7eceb873ab960fe56389fb9fda11f2ad65013231dcbd6106a.exe windows x86
d661ac77e244bdfb1b42fc9e711ba8fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
GetModuleHandleA
GetFileSize
IsBadStringPtrW
ReadFile
GetStartupInfoW
ReadConsoleA
HeapCreate
IsValidLocale
GetLastError
lstrcpyW
GetFileTime
FormatMessageA
GetCurrentDirectoryW
CloseHandle
FindResourceA
ReadConsoleA
ReadConsoleA
ReleaseMutex
SetFileAttributesA
CreateMutexA
msi
MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseHandle
user32
PostMessageW
GetWindowTextA
PeekMessageW
IsCharLowerA
IsZoomed
wsprintfW
DispatchMessageA
LoadCursorW
SetFocus
IsWindow
SetCursorPos
GetWindowLongW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 772KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ