Static task
static1
Behavioral task
behavioral1
Sample
5f733270e1d72e5c83d92d34e1e7e024bc6e5965e5e47e6146dbf0e237340bf6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f733270e1d72e5c83d92d34e1e7e024bc6e5965e5e47e6146dbf0e237340bf6.exe
Resource
win10v2004-20220901-en
General
-
Target
5f733270e1d72e5c83d92d34e1e7e024bc6e5965e5e47e6146dbf0e237340bf6
-
Size
446KB
-
MD5
6229a701feb8f6eab1c028b6a7dc8ac0
-
SHA1
dc7dbe164b6f950992ad8c062b5a5cb2620d15d4
-
SHA256
5f733270e1d72e5c83d92d34e1e7e024bc6e5965e5e47e6146dbf0e237340bf6
-
SHA512
75de963476020de6613d8263217a908b08be9d96a8686a89ed49aa360aeca6d80c5adec29955bc6b67fb56fdfa6187ee91830a364d802dc5b0e722035cd6b242
-
SSDEEP
6144:GhbHGMGCDvanxCqB2F0goWS4cfC5z/NfR4wreusXuG7I41L0We2qhGgVY73D83/8:snqB2F0gNjfJ41Xb7ICJeq73+yV
Malware Config
Signatures
Files
-
5f733270e1d72e5c83d92d34e1e7e024bc6e5965e5e47e6146dbf0e237340bf6.exe windows x86
1d60810d6763b8a47086b08d45741ae0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
SetComputerNameExA
CheckRemoteDebuggerPresent
shell32
DragQueryPoint
ntdll
RtlTraceDatabaseFind
user32
GetCursor
Sections
.text Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 279B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE