Static task
static1
Behavioral task
behavioral1
Sample
5880866b4e2d56396c1664b596248b1b370ad099207fe77a6424934b9cd80942.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5880866b4e2d56396c1664b596248b1b370ad099207fe77a6424934b9cd80942.exe
Resource
win10v2004-20220812-en
General
-
Target
5880866b4e2d56396c1664b596248b1b370ad099207fe77a6424934b9cd80942
-
Size
142KB
-
MD5
7100491167d6bac3b172df14cff46b40
-
SHA1
99e3ba2faa4bb86eb4fe9ecb41487f62b6afcaf7
-
SHA256
5880866b4e2d56396c1664b596248b1b370ad099207fe77a6424934b9cd80942
-
SHA512
e18fb3ce3072ed61d6bd47e30f8e8462e0cb13ce6ab374f36046cd9238137ae01afb1f1d815f50c2d76be935ea07fbcbec882dbbbba3b18478fe88a4ecbcce3d
-
SSDEEP
3072:2pyRaktNKAexF4AWpKBmTz1jgZ7M38jG2XXlawK52r5fzgw40SnVU2cS:2+8xFio+RU43iPswftGWS
Malware Config
Signatures
Files
-
5880866b4e2d56396c1664b596248b1b370ad099207fe77a6424934b9cd80942.exe windows x86
91764f0858f47f366d9c47eb50d7fbea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetModuleHandleA
EnumUILanguagesW
GetPriorityClass
SetComputerNameExW
ReadConsoleInputA
GetCurrentProcessId
GetCommConfig
GetProcessVersion
msvcrt
_acmdln
_XcptFilter
__set_app_type
_adjust_fdiv
getwchar
__p__commode
__p__fmode
exit
_controlfp
_except_handler3
_mbsicmp
_exit
_wtol
_initterm
__getmainargs
__setusermatherr
gdi32
AddFontMemResourceEx
TranslateCharsetInfo
StartDocA
GetCharABCWidthsA
EnumEnhMetaFile
StrokePath
SetICMMode
GetOutlineTextMetricsA
user32
IsHungAppWindow
DdeGetLastError
GetClassNameW
SendMessageA
IsMenu
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ