Static task
static1
Behavioral task
behavioral1
Sample
5d6bb0d14d025cf3eafd69e32886ad9551a9578a3cee0b2df5110f91c5fb9206.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d6bb0d14d025cf3eafd69e32886ad9551a9578a3cee0b2df5110f91c5fb9206.exe
Resource
win10v2004-20220812-en
General
-
Target
5d6bb0d14d025cf3eafd69e32886ad9551a9578a3cee0b2df5110f91c5fb9206
-
Size
310KB
-
MD5
6c638a40f1b8289b38cc74d7a61a49b0
-
SHA1
5a27c7483a4b4d977970b7ad19cb5b5130915409
-
SHA256
5d6bb0d14d025cf3eafd69e32886ad9551a9578a3cee0b2df5110f91c5fb9206
-
SHA512
085b42a85af8512dd8228fa78ede0737d45c456166ce0da82a950ca4114a68db5028a43eddada113aca6b78334525b5837570506cc984ef8244fa378c62b7d5d
-
SSDEEP
6144:s33G8gmYsN74T0KeUdsNJt1SFXL8cR/Y29s7ROazKY5+FBrq8jn8r8ixeRC:03G89FN7y0KrWbuVnR/LCWvqbr8Ye
Malware Config
Signatures
Files
-
5d6bb0d14d025cf3eafd69e32886ad9551a9578a3cee0b2df5110f91c5fb9206.exe windows x86
bcb468ceb234d11e08e18b5886644d46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
SetLastError
CloseHandle
GetStringTypeA
GetFileAttributesW
GetFileAttributesW
GetCurrentThread
RemoveDirectoryW
GlobalLock
VirtualProtectEx
FindClose
CreateEventA
SetCommBreak
GetVersionExA
HeapFree
CreateDirectoryW
GetPrivateProfileIntA
GetModuleHandleA
GetPrivateProfileSectionA
DeviceIoControl
LocalFlags
user32
IsDialogMessageA
GetWindowLongW
PeekMessageW
DispatchMessageA
LoadCursorW
IsWindow
IsZoomed
SetFocus
PostMessageW
GrayStringW
wsprintfW
SetCursorPos
GetWindowTextW
netshell
DllRegisterServer
DllCanUnloadNow
HrCreateDesktopIcon
DllGetClassObject
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ