Static task
static1
Behavioral task
behavioral1
Sample
b5375a30e945d42a05651c863acdd7b1f54e2e434fed8ce518e096ee243e0eba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5375a30e945d42a05651c863acdd7b1f54e2e434fed8ce518e096ee243e0eba.exe
Resource
win10v2004-20220812-en
General
-
Target
b5375a30e945d42a05651c863acdd7b1f54e2e434fed8ce518e096ee243e0eba
-
Size
821KB
-
MD5
606cd2b08209bceea776203dd5c60a20
-
SHA1
c9a4667481c3347ec0730c5cc6454f12ba5138ac
-
SHA256
b5375a30e945d42a05651c863acdd7b1f54e2e434fed8ce518e096ee243e0eba
-
SHA512
3be0452d9eb131d289d330b52a235c60910c1c29d1d9d34f0794cb25b9aa415b48658b41b1b2a1fa14c96f1c1ce6c1c11fa68982f67f3a0e5bef4dd2ab0fbab3
-
SSDEEP
24576:ett4jCpMcqkaQ9EQQsnzyKNpcY6PykoTdTmk43Wjj:Bq2lQqFKNpcVPwTdaH3ij
Malware Config
Signatures
Files
-
b5375a30e945d42a05651c863acdd7b1f54e2e434fed8ce518e096ee243e0eba.exe windows x86
84908444d5ced2b271ae57d8371e0b25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
GetFileSize
GetDriveTypeW
GetDriveTypeW
VirtualAlloc
GetDriveTypeW
GetDriveTypeW
DeleteFileW
lstrlenA
FindResourceA
GetModuleHandleA
GetVolumeInformationA
IsBadStringPtrW
GetModuleFileNameW
GetDriveTypeW
GetCurrentDirectoryW
GetDriveTypeW
msxml3
DllMain
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.play Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.gdata Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ