Static task
static1
Behavioral task
behavioral1
Sample
5bf5f78bffbe1f1adfe34a9faa3e7550ba1cf245468934c893aa96713c3f80d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bf5f78bffbe1f1adfe34a9faa3e7550ba1cf245468934c893aa96713c3f80d9.exe
Resource
win10v2004-20220812-en
General
-
Target
5bf5f78bffbe1f1adfe34a9faa3e7550ba1cf245468934c893aa96713c3f80d9
-
Size
95KB
-
MD5
5b6fd22026eca95c61bd91b761f0fd76
-
SHA1
e72e80a14c16a80f9bdcea774bc1601bc3f011d4
-
SHA256
5bf5f78bffbe1f1adfe34a9faa3e7550ba1cf245468934c893aa96713c3f80d9
-
SHA512
5c989e308817688bce5a11b1bc70794fc27277c2b5badc9715171f14050dba727dcc559c2667a7150a61ac8fc232299b8029cae251a059fcba2642599238257e
-
SSDEEP
1536:9Rcw48EzoYvAMxXyeNHAs7IExL2APK/q8pZ2UagPw:9Sw4XzoSAiCjyVtPSq02UaP
Malware Config
Signatures
Files
-
5bf5f78bffbe1f1adfe34a9faa3e7550ba1cf245468934c893aa96713c3f80d9.exe windows x86
d2a1c080a948cc82e05bfdc9cecac81d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
HeapFree
VirtualProtectEx
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
MessageBoxA
LoadImageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
PostQuitMessage
GetWindowLongA
LoadMenuA
SetMenu
DrawMenuBar
GetDC
ReleaseDC
BeginPaint
GetClientRect
EndPaint
DestroyWindow
DefWindowProcA
gdi32
RestoreDC
DeleteObject
DeleteDC
CreateCompatibleDC
StretchBlt
SaveDC
SelectObject
GetObjectA
GetStockObject
comdlg32
GetOpenFileNameA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ