Static task
static1
Behavioral task
behavioral1
Sample
5d82ab8d34f6b15a7c621512ad569206f5f80758b3c9ae974ceebc5ad97feda5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d82ab8d34f6b15a7c621512ad569206f5f80758b3c9ae974ceebc5ad97feda5.exe
Resource
win10v2004-20220812-en
General
-
Target
5d82ab8d34f6b15a7c621512ad569206f5f80758b3c9ae974ceebc5ad97feda5
-
Size
1.3MB
-
MD5
71d57d480b1e7854b9b5e6529de4a7c0
-
SHA1
b7d9459115b42c213d90e4b6e2bc4b36df449972
-
SHA256
5d82ab8d34f6b15a7c621512ad569206f5f80758b3c9ae974ceebc5ad97feda5
-
SHA512
c1e8003508a99009ab7d1233cbd9414d1c932ee7cd775969b1a6370d6c3059c7752f17829fdefd03357f3526b7cfc47c6dba6c4dc2fff3a97366af0d89b6aa6e
-
SSDEEP
24576:ogMTQ3u5hxp63EeqN/fy8j9fFhCKoR22eG2J3Zu5VkRKUUTEvitbSgHR1fxVyGd:ogMGu3xpgj38j3Q42cJ3Zu4KVAvKbHD9
Malware Config
Signatures
Files
-
5d82ab8d34f6b15a7c621512ad569206f5f80758b3c9ae974ceebc5ad97feda5.exe windows x86
0e710d1dedbbf7bc573b5df52d5ee277
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
CreateFileA
LocalFree
lstrcmpA
GetFileAttributesA
GetVolumeInformationA
_lopen
GetModuleFileNameA
GetVersionExA
FileTimeToSystemTime
_llseek
lstrcpynA
GetSystemDirectoryA
SearchPathA
GetEnvironmentVariableA
GetWindowsDirectoryA
lstrcatA
GetCurrentDirectoryA
_lclose
CloseHandle
lstrcpyA
lstrlenA
CreateDirectoryA
IsDBCSLeadByte
_lread
WriteFile
LocalAlloc
DeleteFileA
GetStartupInfoA
GetModuleHandleA
user32
SetFocus
GetDlgItemTextA
PostMessageA
KillTimer
SendDlgItemMessageA
SetWindowTextA
DialogBoxParamA
LoadIconA
SetTimer
IsIconic
DestroyIcon
MoveWindow
GetSystemMetrics
GetWindowRect
BeginPaint
SendMessageA
EndPaint
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
wsprintfA
CharPrevA
EndDialog
EnableWindow
GetDlgItem
DrawIcon
gdi32
SetMapMode
GetMapMode
comdlg32
GetOpenFileNameA
GetFileTitleA
shell32
ShellExecuteA
crtdll
_global_unwind2
_local_unwind2
memset
_strnicmp
exit
strchr
strrchr
atoi
_fmode_dll
_exit
_XcptFilter
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 165B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ