Static task
static1
Behavioral task
behavioral1
Sample
5f395c973b80835275936d5f5a694c53f83f095708d75891aab30dbcfef60cbe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5f395c973b80835275936d5f5a694c53f83f095708d75891aab30dbcfef60cbe.exe
Resource
win10v2004-20220812-en
General
-
Target
5f395c973b80835275936d5f5a694c53f83f095708d75891aab30dbcfef60cbe
-
Size
268KB
-
MD5
809892f775e996739fdb94a9ee6fcd0d
-
SHA1
794107f4da833f70a3a64eb1006b8dd18ec74d7a
-
SHA256
5f395c973b80835275936d5f5a694c53f83f095708d75891aab30dbcfef60cbe
-
SHA512
25fa19a6788daeb2a548870fd49716c035a289f3f24aa1ea71d8de75a06994c68b273b1a85db7381a63b1afb9752dac0c369712e68f182fe4cd0666460b6096c
-
SSDEEP
6144:H3oBZ0FcLa4V5um2TSmTv8xYlF/dfFty0y:Y7XLl/umi7Tv6YlF/dfFty
Malware Config
Signatures
Files
-
5f395c973b80835275936d5f5a694c53f83f095708d75891aab30dbcfef60cbe.exe windows x86
85de6d5778fb73d705f03d09c7475fc2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dhcpcsvc
DhcpEnumClasses
McastApiCleanup
McastGenUID
kernel32
CompareStringA
CloseHandle
GetTimeFormatW
LoadLibraryW
GetProcessId
GetLogicalDriveStringsW
GetOEMCP
GetAtomNameA
VirtualProtectEx
GetModuleHandleA
GetFullPathNameW
GetDriveTypeA
GetCommandLineA
WaitForSingleObject
ReadConsoleA
user32
CreateDesktopW
wsprintfA
InsertMenuA
IsZoomed
DrawStateA
PeekMessageW
GetMessageW
GetDlgItemTextW
LoadIconA
DialogBoxParamA
LoadBitmapA
FlashWindow
IsDialogMessageW
LoadMenuW
PostMessageW
GetPropW
LoadCursorW
IsMenu
clbcatq
SetSetupSave
ComPlusMigrate
CoRegCleanup
DowngradeAPL
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ