Static task
static1
Behavioral task
behavioral1
Sample
b5b613aded8b1db760e3274c12c6658fed4e32492db78289c19d2df4c94030b5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b5b613aded8b1db760e3274c12c6658fed4e32492db78289c19d2df4c94030b5.exe
Resource
win10v2004-20220812-en
General
-
Target
b5b613aded8b1db760e3274c12c6658fed4e32492db78289c19d2df4c94030b5
-
Size
307KB
-
MD5
63d365d7e41ab87ccc66e9cba57aad5e
-
SHA1
ecbfe0bf9881e10e23dd5ac9849a041798917494
-
SHA256
b5b613aded8b1db760e3274c12c6658fed4e32492db78289c19d2df4c94030b5
-
SHA512
399792845b048a39a6bd9e8766a88ad36c076ce17f0689b32c365c7cbe9f002616132388f858adb9b0112d245bbdd8c4e98ee28624c2d4572a4fdc266faef975
-
SSDEEP
6144:aDPnPsHhCV2AXiCjBkY5IOLbfTRJWnK4clwGs75LhFYrg5Urh2Jmxh6jT:gPnPTbnjfDsUrhmv
Malware Config
Signatures
Files
-
b5b613aded8b1db760e3274c12c6658fed4e32492db78289c19d2df4c94030b5.exe windows x86
0d2fd89e8c4af68a9a247aa87bab4fee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeProcess
GetFileSize
GetStartupInfoW
LeaveCriticalSection
HeapCreate
SetFileTime
CloseHandle
ReadFile
GetStringTypeA
InterlockedExchange
GetLastError
GetModuleHandleA
IsBadWritePtr
SetFileTime
lstrcpyA
CreateEventA
SetFileTime
HeapSize
lstrcatA
LoadLibraryA
SetConsoleTitleA
mstscax
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
shell32
SHGetDiskFreeSpaceA
ShellMessageBoxW
DragQueryFileA
SHFree
ExtractIconA
SHGetSettings
StrChrA
DragFinish
SHGetMalloc
DllUnregisterServer
DuplicateIcon
DragAcceptFiles
ShellAboutA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ