Static task
static1
Behavioral task
behavioral1
Sample
5ba1e25727958bfd8754b2a0ef38a49222204900ba4610c6e0257d952f20634c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ba1e25727958bfd8754b2a0ef38a49222204900ba4610c6e0257d952f20634c.exe
Resource
win10v2004-20220901-en
General
-
Target
5ba1e25727958bfd8754b2a0ef38a49222204900ba4610c6e0257d952f20634c
-
Size
282KB
-
MD5
645362ed31ae105b989cd23b9c6de64d
-
SHA1
d934ac4051eec988b2c7299f49a22a23877a794e
-
SHA256
5ba1e25727958bfd8754b2a0ef38a49222204900ba4610c6e0257d952f20634c
-
SHA512
abead668f894028c3f34bc8f303f28671aba50eb8379d09ef1aaa02247ebbdae404a5c0725b3286470ead02776bc0f306fcc561e9514f695d6ea8ae95829e2d4
-
SSDEEP
6144:IBz2ozp0S64A6qOViPuqalMSuPlE7dQfkKvqTMrsgxScUhnihiY:IByaViPY6L9z5YgxxUhiR
Malware Config
Signatures
Files
-
5ba1e25727958bfd8754b2a0ef38a49222204900ba4610c6e0257d952f20634c.exe windows x86
cea22ac828c75455ae1a6c0e547c84ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
CreateThread
HeapReAlloc
CloseHandle
GetAtomNameA
GetVersion
CompareFileTime
TlsFree
WriteConsoleA
VirtualProtect
GetACP
lstrlenA
GetConsoleCP
FindAtomA
GetTickCount
InterlockedExchange
ExitProcess
LoadLibraryW
GetModuleHandleA
SetEvent
GlobalUnlock
user32
GetWindowTextA
InflateRect
PostMessageA
GetMenuStringA
LoadIconA
UpdateWindow
DialogBoxParamA
MessageBoxA
GetWindowLongA
GetParent
ShowWindow
SetSysColors
DestroyMenu
ModifyMenuA
InsertMenuA
PostQuitMessage
GetSubMenu
ScrollDC
EnableScrollBar
GetKeyboardLayout
SetPropA
TranslateMessage
DispatchMessageA
CopyRect
GetScrollRange
GetMenu
GetDlgItem
SetWindowPos
EqualRect
shlwapi
UrlHashA
StrToIntExA
StrTrimA
UrlCombineA
StrToIntA
version
GetFileVersionInfoA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ