Static task
static1
Behavioral task
behavioral1
Sample
5da787e24c2482f83182ed9be3ec493cc76b2567c2c6c2c1d2a3dc5978fdae10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5da787e24c2482f83182ed9be3ec493cc76b2567c2c6c2c1d2a3dc5978fdae10.exe
Resource
win10v2004-20220812-en
General
-
Target
5da787e24c2482f83182ed9be3ec493cc76b2567c2c6c2c1d2a3dc5978fdae10
-
Size
81KB
-
MD5
6061917d82fac6f08f04923098c0433c
-
SHA1
e03085fad6ce1f318404443907df4cf2bde0480e
-
SHA256
5da787e24c2482f83182ed9be3ec493cc76b2567c2c6c2c1d2a3dc5978fdae10
-
SHA512
f98f450ac2cec45c98cd4cd0620905b7b0da5d03d03925409870fd959b61aa81f56287f50b92c8643d8822778aff1003410d3df8d7fc2b0ae45a0744911f2b4a
-
SSDEEP
1536:49YIxG4LAmhUxm57NP1HMs8WQe4eSq8kjNVndOHx3chPKhW:49YIphUujHMg4Xqdj2yh3
Malware Config
Signatures
Files
-
5da787e24c2482f83182ed9be3ec493cc76b2567c2c6c2c1d2a3dc5978fdae10.exe windows x86
645067a14bd828171e2eb39212d76a4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
MapViewOfFile
HeapSize
GetTickCount
GetDriveTypeW
TlsGetValue
GetProcessHeap
GetFileAttributesA
SetLastError
IsBadWritePtr
ResetEvent
GetFileAttributesA
GetStringTypeA
GetModuleHandleA
RemoveDirectoryA
CreateDirectoryA
FindResourceA
GetLocaleInfoA
VirtualProtect
IsValidCodePage
FindClose
user32
PeekMessageA
wsprintfW
IsWindow
GetWindowTextW
LoadCursorA
IsDialogMessageA
SetFocus
GetWindowLongW
PostMessageW
SetCursor
GetCapture
DispatchMessageA
LoadImageW
msaatext
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE