Static task
static1
Behavioral task
behavioral1
Sample
d5b5a8f2c15b57b8f5c258441aed86f4bb5226fc7f5f0a5a4491caa055fb6890.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5b5a8f2c15b57b8f5c258441aed86f4bb5226fc7f5f0a5a4491caa055fb6890.exe
Resource
win10v2004-20220901-en
General
-
Target
d5b5a8f2c15b57b8f5c258441aed86f4bb5226fc7f5f0a5a4491caa055fb6890
-
Size
434KB
-
MD5
414d011e96cbd0a8a1e0ab535fbc7a70
-
SHA1
23cd5908aa0a39a043c0f30b7f36ebfcbe73a157
-
SHA256
d5b5a8f2c15b57b8f5c258441aed86f4bb5226fc7f5f0a5a4491caa055fb6890
-
SHA512
35667c1396a1b6b5cfc06fe49ff666989abf433fb78da0cc908134b666477afb7cee93bee1ad3bcf9504678f3ea4546c771ecd9555401e4d7e6002d46847e5f4
-
SSDEEP
12288:DQepGUR5k59o1Ihp13OY1GeWULYfcQGysO0F:hH5kTOIhcenYJGV3F
Malware Config
Signatures
Files
-
d5b5a8f2c15b57b8f5c258441aed86f4bb5226fc7f5f0a5a4491caa055fb6890.exe windows x86
de6185b8cdae1e84cb8f9add0b5f8afc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 45KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ