Static task
static1
Behavioral task
behavioral1
Sample
5615f265c3e60f30b772b4b2d92da818248ccee1420538f513ff2724672274fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5615f265c3e60f30b772b4b2d92da818248ccee1420538f513ff2724672274fb.exe
Resource
win10v2004-20220901-en
General
-
Target
5615f265c3e60f30b772b4b2d92da818248ccee1420538f513ff2724672274fb
-
Size
208KB
-
MD5
49711a7c1f16c7aa3b4cee258f6aef6e
-
SHA1
d6f8b253abfa627bbc0e15da7746bb9685473348
-
SHA256
5615f265c3e60f30b772b4b2d92da818248ccee1420538f513ff2724672274fb
-
SHA512
40a2f2df4bbad1983502ba42c543ad4a1c861d33d7b388f463bbc232194fb27e5ec7866affb87aefae4be1fbe224d880890a55746962a55f1f71d53dcb6ed64b
-
SSDEEP
6144:WeEKe+6gpRG/A7sp/G+k0OocfTFf90D1a8Jd:NMOsp/G+jmTFV0Ba8Jd
Malware Config
Signatures
Files
-
5615f265c3e60f30b772b4b2d92da818248ccee1420538f513ff2724672274fb.exe windows x86
5e453976134279ba3c896173ef1d19dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
WindowFromPoint
IsWindowVisible
BeginPaint
EndPaint
SetWindowTextA
LoadIconA
LoadCursorA
gdi32
GetTextColor
FrameRgn
CreateFontIndirectA
DeleteObject
SetRectRgn
kernel32
GetTickCount
GetPrivateProfileStringA
GetThreadLocale
GetLastError
HeapDestroy
RtlUnwind
SetFileAttributesA
GetStartupInfoA
GetProcAddress
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetStdHandle
HeapAlloc
HeapCreate
GetEnvironmentStrings
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ