Static task
static1
Behavioral task
behavioral1
Sample
5e941f49ef520f88e13a0aeb2de7b5291900ff7f1f64eaebddfd8db8d34bbcdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e941f49ef520f88e13a0aeb2de7b5291900ff7f1f64eaebddfd8db8d34bbcdd.exe
Resource
win10v2004-20220812-en
General
-
Target
5e941f49ef520f88e13a0aeb2de7b5291900ff7f1f64eaebddfd8db8d34bbcdd
-
Size
60KB
-
MD5
7ca61a4dd96915682ca288ad3da25ff0
-
SHA1
2b884f34fab093d863b949063fef56d9ee3e5211
-
SHA256
5e941f49ef520f88e13a0aeb2de7b5291900ff7f1f64eaebddfd8db8d34bbcdd
-
SHA512
01fe68fb934c37ff32024b016f3af6fca983990956a5e8bc8f811322c2be41917368ce8a921254971ff56037ced6bf7edf4fe1c2d3bb424aa68eade3f83a3d20
-
SSDEEP
768:Ii/My0p89+zxEbjakT725yBFkQF3CXnf5+NODzu1QW1N41wMr9uygSCyslOgv07v:uzK9P3EA6cyXfBuyWcr9JgS2Ogs76ZQ
Malware Config
Signatures
Files
-
5e941f49ef520f88e13a0aeb2de7b5291900ff7f1f64eaebddfd8db8d34bbcdd.exe windows x86
1b7ca1033d6052d828a7a2243b66ed85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
DeleteFileA
CloseHandle
EnumResourceTypesA
GetCommandLineA
GlobalFlags
CloseHandle
CreateEventW
HeapDestroy
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
HeapCreate
GetDriveTypeW
lstrlenA
SetLastError
GetCommandLineA
GetConsoleTitleA
GetTimeFormatW
advapi32
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteValueA
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidAcl
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oeqkxal Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE