Static task
static1
Behavioral task
behavioral1
Sample
5b2026e41e1d070d2dfdffdfdfefa6981c6297fea6a27966a8c305ed96554f0c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b2026e41e1d070d2dfdffdfdfefa6981c6297fea6a27966a8c305ed96554f0c.exe
Resource
win10v2004-20220812-en
General
-
Target
5b2026e41e1d070d2dfdffdfdfefa6981c6297fea6a27966a8c305ed96554f0c
-
Size
508KB
-
MD5
6d478c9214c1ee8598ae960f4c34cd57
-
SHA1
9e5ce83ee5f6a12394663ed3a71d7848c0b80df5
-
SHA256
5b2026e41e1d070d2dfdffdfdfefa6981c6297fea6a27966a8c305ed96554f0c
-
SHA512
ea9deebfac6952849a2a88ca8f07b81379da838cefdb868234d3c1ff104a0eed41f41a0c51c4c2adf3b560227a06c320547e8ca3716652bf9d7b36316271b7b0
-
SSDEEP
3072:q1vMJKVnnlsYgTLnUkmbi5ffBNQjpIy7aWgmbW0Pnyyp9fdPdiAOtvmmFG8bC4Rm:1IVaRUkmWzNAy0l9lgLFGT2u
Malware Config
Signatures
Files
-
5b2026e41e1d070d2dfdffdfdfefa6981c6297fea6a27966a8c305ed96554f0c.exe windows x86
cbd01cc777a16e52dda89ecb5dd31e4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
avicap32
capCreateCaptureWindowA
gdi32
PatBlt
msacm32
acmStreamSize
netapi32
Netbios
oleaut32
SysFreeString
shell32
ShellExecuteA
user32
GetDC
winmm
waveInOpen
wsock32
send
Sections
0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE