Static task
static1
Behavioral task
behavioral1
Sample
5b8db1455a0788f714671546e9656a252e739356172594ac4d154ac26f6740bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b8db1455a0788f714671546e9656a252e739356172594ac4d154ac26f6740bd.exe
Resource
win10v2004-20220901-en
General
-
Target
5b8db1455a0788f714671546e9656a252e739356172594ac4d154ac26f6740bd
-
Size
144KB
-
MD5
4c46a1d69a793fefe1458972c6c389a0
-
SHA1
4b34a3b129a449a5a9b8eda998a2e44eabd5a115
-
SHA256
5b8db1455a0788f714671546e9656a252e739356172594ac4d154ac26f6740bd
-
SHA512
f47d023ee22875ee361afcf114899df039aa6861f042e67dadbdebbf44084f9dac1d33a9a4a35f0df2694835feaab7218f5f51118c47236822a71ae00e4ae07d
-
SSDEEP
3072:31WsRgFx5MkJNWPKkFv4Hs2qmRlixXaKa0qMW2pVol3IFEyKwLR:lbRyEkJNWJFg/wguJpVopIh
Malware Config
Signatures
Files
-
5b8db1455a0788f714671546e9656a252e739356172594ac4d154ac26f6740bd.exe windows x86
565366314157179fcc40ed06fb9f987a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeW
FreeResource
GetProcessShutdownParameters
DefineDosDeviceW
_lwrite
GetConsoleCharType
FreeConsole
AddAtomA
ClearCommError
CopyFileExA
EnumDateFormatsA
FindCloseChangeNotification
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE