Static task
static1
Behavioral task
behavioral1
Sample
b053532e2d9b12521c35bc62441e5280ecc7376676e53e2cb10450f3df97475e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b053532e2d9b12521c35bc62441e5280ecc7376676e53e2cb10450f3df97475e.exe
Resource
win10v2004-20220901-en
General
-
Target
b053532e2d9b12521c35bc62441e5280ecc7376676e53e2cb10450f3df97475e
-
Size
725KB
-
MD5
4185a0ebac66be79ea4863e74e8eaa90
-
SHA1
4dd1b7433c780cb6eee66f2776ee91ced30f55e3
-
SHA256
b053532e2d9b12521c35bc62441e5280ecc7376676e53e2cb10450f3df97475e
-
SHA512
25a78e51494d33341c1fbe9faa26ef76bbaff545bb920ad069a316d78c05de47fa2528248a78473aefa22f5c7e7d0a52b7eadd94dc0de05c7a497bda48a4b7af
-
SSDEEP
12288:sExXoG/3F0nLUlPIpTta7e/NU/3PwoNF7abOgHtkGG64Kg2o7ZmZcc1geFpBnKAP:sEx4e0YlItayK3fn70TKGG6PgEcXebJz
Malware Config
Signatures
Files
-
b053532e2d9b12521c35bc62441e5280ecc7376676e53e2cb10450f3df97475e.exe windows x86
32bcc15ba241154d4ec933861f9c9831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FileEncryptionStatusA
AccessCheckByTypeAndAuditAlarmW
ole32
CoCreateFreeThreadedMarshaler
StgCreatePropSetStg
kernel32
GetCommandLineW
CreatePipe
ntdll
ZwDuplicateObject
ZwConnectPort
NtCompareTokens
user32
GetActiveWindow
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE