Static task
static1
Behavioral task
behavioral1
Sample
5d87d8462de63ab0344faf12151b24c50e73a92776a435cd9eaf2685a6ebac74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d87d8462de63ab0344faf12151b24c50e73a92776a435cd9eaf2685a6ebac74.exe
Resource
win10v2004-20220812-en
General
-
Target
5d87d8462de63ab0344faf12151b24c50e73a92776a435cd9eaf2685a6ebac74
-
Size
22KB
-
MD5
6b59283f1f10b7666ebdf66f322a1b50
-
SHA1
ffdaccc613492489b39982dec36183d080d60932
-
SHA256
5d87d8462de63ab0344faf12151b24c50e73a92776a435cd9eaf2685a6ebac74
-
SHA512
82f1e2dbb5c7bfa44353191603b19711e168b030980293bfb683efd0ef9d90503236e2dd87f1387bf0bed304d37a8f24d9868b6036cf0e1152d224bd47900d5d
-
SSDEEP
384:/v3BWbim/O47iybh61qnFT34cAxwr6+e9Pfqbn1:BW2mG2V8CFToPx3ha5
Malware Config
Signatures
Files
-
5d87d8462de63ab0344faf12151b24c50e73a92776a435cd9eaf2685a6ebac74.exe windows x86
47e6bcbc85b2b2e91db3152110a28b48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5186
ord354
ord2393
ord6010
ord1979
ord6385
ord2764
ord3811
ord924
ord665
ord1988
ord690
ord6883
ord801
ord541
ord926
ord858
ord5572
ord825
ord535
ord540
ord2818
ord823
ord2915
ord537
ord860
ord3337
ord5207
ord389
ord800
msvcrt
exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_acmdln
_controlfp
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_mbscmp
sprintf
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3
_initterm
kernel32
Sleep
GetTickCount
CreateMutexA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
GetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
WriteProfileStringA
GetProfileIntA
GetModuleHandleA
GetStartupInfoA
user32
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
FindWindowExA
GetWindowTextA
SetForegroundWindow
keybd_event
ShowWindow
GetActiveWindow
GetForegroundWindow
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE