Static task
static1
Behavioral task
behavioral1
Sample
5ea8b931151e6720a1538036f68ba03a77535723553ee8e4518c821280ffe1f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ea8b931151e6720a1538036f68ba03a77535723553ee8e4518c821280ffe1f7.exe
Resource
win10v2004-20220812-en
General
-
Target
5ea8b931151e6720a1538036f68ba03a77535723553ee8e4518c821280ffe1f7
-
Size
255KB
-
MD5
6a1a9ca144d042787c453be80ad617a0
-
SHA1
70695e0496c1b95801903de832841a0ca2f48d24
-
SHA256
5ea8b931151e6720a1538036f68ba03a77535723553ee8e4518c821280ffe1f7
-
SHA512
19f4d5d3ff4c9e7eb7d833ef799031b71e275751cc477a55de783209d36525ab9add1ff4f9da9b87a080d47ec31bed7414bf45a58fb03700bd8b8bce38f4dd8d
-
SSDEEP
6144:Xb7l9ZWGRH9Hy43X/MmE/GpVz2qvJ+qeIQ3/vYm:L7l7RHN3ETGjnteI2/
Malware Config
Signatures
Files
-
5ea8b931151e6720a1538036f68ba03a77535723553ee8e4518c821280ffe1f7.exe windows x86
c7ee20a7db41ac68c27d8cf3e68c0e19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetOEMCP
GetStartupInfoA
GetStdHandle
EnterCriticalSection
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LeaveCriticalSection
LoadLibraryA
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
DeleteCriticalSection
WriteFile
GetModuleHandleA
GetVersionExA
GetProcAddress
user32
LoadIconA
gdi32
GetStockObject
advapi32
RegOpenKeyExW
RegCloseKey
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
t4 Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aR4 Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aR3 Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ