Static task
static1
Behavioral task
behavioral1
Sample
05b8a471de5e38edc6d93b5e08ae48a1306915ce29f5246a7142c77fb5967ba2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05b8a471de5e38edc6d93b5e08ae48a1306915ce29f5246a7142c77fb5967ba2.exe
Resource
win10v2004-20220812-en
General
-
Target
05b8a471de5e38edc6d93b5e08ae48a1306915ce29f5246a7142c77fb5967ba2
-
Size
76KB
-
MD5
6f0cab4edd903882d205ab4803da2bf1
-
SHA1
8ead4fd57a6e0f5ed7af323058072793c3b5ae73
-
SHA256
05b8a471de5e38edc6d93b5e08ae48a1306915ce29f5246a7142c77fb5967ba2
-
SHA512
397f494a14d23f5eb1ab83cee0e319187f9afd77b5c64e0c2fd8fa201187c13a952f0ebba9a974f629f08b78a0676b43d52258f37a003314d04125a2d831f302
-
SSDEEP
1536:HsAltPMBsIots4zHW7qZeXLmowgRnznPJ/+7MF9HISynpjVrs2ryrd1vUQuq6:dlF84S7zXLmo7nzPSMbI1nHs2qo
Malware Config
Signatures
Files
-
05b8a471de5e38edc6d93b5e08ae48a1306915ce29f5246a7142c77fb5967ba2.exe windows x86
70272c08aa98c8cf6346497b624dbc53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleFontSize
OpenEventW
SearchPathA
SetThreadExecutionState
lstrcpynW
DisableThreadLibraryCalls
ReadConsoleOutputW
GetConsoleKeyboardLayoutNameA
LZOpenFileW
EnumResourceLanguagesA
GetCPFileNameFromRegistry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE