Static task
static1
Behavioral task
behavioral1
Sample
5e94a4d2421b5aab383f5a6916ea765c45014c8b5357a41f9b34ec61a9641286.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5e94a4d2421b5aab383f5a6916ea765c45014c8b5357a41f9b34ec61a9641286.exe
Resource
win10v2004-20220812-en
General
-
Target
5e94a4d2421b5aab383f5a6916ea765c45014c8b5357a41f9b34ec61a9641286
-
Size
447KB
-
MD5
410c4210eff3a61dd396b61305e567c0
-
SHA1
dc1dccb7e8ef3612c55d41666fc393eb05c6ebfa
-
SHA256
5e94a4d2421b5aab383f5a6916ea765c45014c8b5357a41f9b34ec61a9641286
-
SHA512
ca2f4c4e6417cdb94c2f15f2ab191a58efe0ce7b8cc8c11ed9628367195cf826e83adfc59922b97b71186fb56c9c375c7727f68b9a5acdec9321377a31dea3ad
-
SSDEEP
12288:QhXq+t23PiVPDQOALPCyo79IJNin9g+6KMAnmyM:Qh32/iVPU1hoaJNS9TXfDM
Malware Config
Signatures
Files
-
5e94a4d2421b5aab383f5a6916ea765c45014c8b5357a41f9b34ec61a9641286.exe windows x86
c0c6bb10b6a8ba53d60391cc52e751ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalAppExitW
GetVersion
GetThreadLocale
ntdll
ZwQueryVirtualMemory
user32
GetCapture
Sections
.text Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE