Static task
static1
Behavioral task
behavioral1
Sample
533f8ba9bd630b02ac75d5a5de38307555716990683ee5d2bbe3d52b3e62b78e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
533f8ba9bd630b02ac75d5a5de38307555716990683ee5d2bbe3d52b3e62b78e.exe
Resource
win10v2004-20220812-en
General
-
Target
533f8ba9bd630b02ac75d5a5de38307555716990683ee5d2bbe3d52b3e62b78e
-
Size
107KB
-
MD5
0674239d87eca8e4a59983211dc7c497
-
SHA1
c604874c308d2e2ad1ee8778843bccec547bc3d8
-
SHA256
533f8ba9bd630b02ac75d5a5de38307555716990683ee5d2bbe3d52b3e62b78e
-
SHA512
78204e46b001650844602c1ef006255058dd36906292ddca717037d18ae88243021cd21c107991faccd8a8e6e856a404e79c8da2b3355da10155dc1e8033f54c
-
SSDEEP
1536:9tE1Zz9OSsa06JlAPp9CNk72iZ5/ITnmEcZNaalpojZ23NvXMAK6w6Ebcx0s:9a1Z+CJWR9CJijwlcLujZMNvX5rDWy0s
Malware Config
Signatures
Files
-
533f8ba9bd630b02ac75d5a5de38307555716990683ee5d2bbe3d52b3e62b78e.exe windows x86
834ad9e7ff2034233ef1cfb4f31d5598
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FindClose
UnmapViewOfFile
GetCurrentDirectoryA
GetModuleHandleA
CreateFileW
SetLastError
GetCurrentThreadId
CreateProcessA
CloseHandle
FindResourceW
lstrlenA
GetCommandLineA
lstrcpyA
LocalFree
GetComputerNameA
HeapCreate
Sleep
PulseEvent
LoadLibraryExW
user32
SetFocus
CreateWindowExA
DrawEdge
GetDlgItem
CreateIcon
CheckRadioButton
DispatchMessageA
DrawMenuBar
GetCaretPos
GetDC
CallWindowProcA
IsWindow
FillRect
rsaenh
CPHashData
CPSignHash
CPDecrypt
CPDeriveKey
CPGenKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qnwzuew Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE