Static task
static1
Behavioral task
behavioral1
Sample
c5ad043840d42303394ffb38b6bde219520193db98536349dfee69795d5716d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5ad043840d42303394ffb38b6bde219520193db98536349dfee69795d5716d9.exe
Resource
win10v2004-20220812-en
General
-
Target
c5ad043840d42303394ffb38b6bde219520193db98536349dfee69795d5716d9
-
Size
299KB
-
MD5
6be29a7e43cddfc521f1f31f44592610
-
SHA1
397a324e528d9a36aaf76dab42e675c68c5f58bb
-
SHA256
c5ad043840d42303394ffb38b6bde219520193db98536349dfee69795d5716d9
-
SHA512
082f2a6bb2850db9627502757216ebc6d45678d36111755a0679c5fcd8caf4efb46fddfb3858dffc92d4f8969454a0ce56061dd3bfced9d18d76b80494c2fcaa
-
SSDEEP
6144:hrQqRXW5l6CvAY2A9nKJtoVwdLlfFnXiBVwFOYvTjYRmA84gJoc:hrtX0NI49KJmVwdtAVqOYvTjXP
Malware Config
Signatures
Files
-
c5ad043840d42303394ffb38b6bde219520193db98536349dfee69795d5716d9.exe windows x86
32d818633e771348f983c3a377c7ff75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenW
HeapCreate
WriteConsoleW
CopyFileW
CreatePipe
IsBadCodePtr
GetFileAttributesA
DisconnectNamedPipe
IsValidLocale
SetPriorityClass
lstrcpyW
GetCurrentDirectoryA
WriteConsoleW
IsBadStringPtrA
GetFileSize
GetLastError
WriteConsoleW
GetStartupInfoA
ReleaseMutex
GetModuleHandleA
CloseHandle
msftedit
SetCustomTextOutHandlerEx
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc
shell32
ShellMessageBoxA
SHGetMalloc
ShellAboutA
ShellMessageBoxA
SHGetSettings
ExtractIconA
DragQueryFileA
DragAcceptFiles
SHGetDiskFreeSpaceA
SHGetDiskFreeSpaceA
StrChrA
DuplicateIcon
SHGetMalloc
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ