Static task
static1
Behavioral task
behavioral1
Sample
5bafba20ad4bf6a6827b2c89a5b74606d00b7d380f9fff7d469d4b52c5be4875.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bafba20ad4bf6a6827b2c89a5b74606d00b7d380f9fff7d469d4b52c5be4875.exe
Resource
win10v2004-20220812-en
General
-
Target
5bafba20ad4bf6a6827b2c89a5b74606d00b7d380f9fff7d469d4b52c5be4875
-
Size
175KB
-
MD5
70e0555942ba10a8f3ba85e7d6db6c7d
-
SHA1
1ab5a309486943ab79f1e2f647a1d4228c0ce8d1
-
SHA256
5bafba20ad4bf6a6827b2c89a5b74606d00b7d380f9fff7d469d4b52c5be4875
-
SHA512
c853f908df99c4e4cef1d0201379ab46304e6bd8a1ae9713bd2155fd4ec72d1a045f38bba4cffd9907ec2f7939766ae162b343bb29db2eba8584593788b308bf
-
SSDEEP
3072:NDSIG7qC3VkybSE5Vgjh9I+z1QBVOo8b33CnkBlyvDMCCAnJXzv4+cj631PvG5xy:hGlkVE5VgDDS2Sn6lyv/JL4gPvG6
Malware Config
Signatures
Files
-
5bafba20ad4bf6a6827b2c89a5b74606d00b7d380f9fff7d469d4b52c5be4875.exe windows x86
09ae3e4ec56f2e3bfdcde576bd435ace
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
HeapCreate
WriteProfileStringA
DeleteAtom
CloseHandle
GlobalUnlock
GetLastError
GlobalAddAtomA
VirtualAlloc
GlobalFree
GlobalAddAtomA
EnterCriticalSection
GetStdHandle
SetCommBreak
LoadLibraryExA
RaiseException
LoadResource
lstrcat
GetOEMCP
LocalFree
SetConsolePalette
user32
EndPaint
IsIconic
CloseWindow
GetActiveWindow
GetForegroundWindow
GetFocus
GetWindow
BeginPaint
GetClassInfoExA
DrawEdge
GetDC
ValidateRect
GetWindowTextA
GetClassNameA
GetWindowTextLengthA
ShowWindow
ReleaseDC
AlignRects
GetParent
wsock32
WSAAsyncGetServByPort
WSACleanup
WSASetBlockingHook
WSAGetLastError
WSAStartup
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ