Static task
static1
Behavioral task
behavioral1
Sample
5a97fa706a3e9ae78b8e54739d25afd7c227f7428705538025e9ff371bd15550.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a97fa706a3e9ae78b8e54739d25afd7c227f7428705538025e9ff371bd15550.exe
Resource
win10v2004-20220812-en
General
-
Target
5a97fa706a3e9ae78b8e54739d25afd7c227f7428705538025e9ff371bd15550
-
Size
442KB
-
MD5
4e746ba421b591fc542e0294e7aaae20
-
SHA1
6870728a389e5de6a186ce7677f0cc2a174495d9
-
SHA256
5a97fa706a3e9ae78b8e54739d25afd7c227f7428705538025e9ff371bd15550
-
SHA512
9da50d772ffd8dadbb7789775efb68aaa9976e0ff3bc6a6345fa94f0340bca5375f51d4e768ba68f79a4ada96563050880c96a579072842f8dbb13928262dccf
-
SSDEEP
12288:1DrWbkoP2hPWQa+BNZ+12EMNqVaiUltvC5JBUcfjX1c:ZWbkoP2htZVA2h4afCucLa
Malware Config
Signatures
Files
-
5a97fa706a3e9ae78b8e54739d25afd7c227f7428705538025e9ff371bd15550.exe windows x86
380e844997a853ca66125d18f883d742
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwCompressKey
advapi32
LsaStorePrivateData
oleaut32
VarR4FromUI4
kernel32
GetSystemDefaultLangID
LocalCompact
GetUserDefaultLangID
GetCommandLineA
Sections
.text Size: 435KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE