Static task
static1
Behavioral task
behavioral1
Sample
b5d9455675791048c172e92af938be87eef0c3bc3ed52a0eff980a456907b770.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5d9455675791048c172e92af938be87eef0c3bc3ed52a0eff980a456907b770.exe
Resource
win10v2004-20220812-en
General
-
Target
b5d9455675791048c172e92af938be87eef0c3bc3ed52a0eff980a456907b770
-
Size
1.1MB
-
MD5
965b75bec2f43cd1a111aa22756d2a53
-
SHA1
a6810eacb64da973b0750f6a5acd0cc400ae7899
-
SHA256
b5d9455675791048c172e92af938be87eef0c3bc3ed52a0eff980a456907b770
-
SHA512
d27e19b3be0f3f68fe1a90918761c8d1c94399bdea181b960800d4c3e108c9571ca7643ca5c3609193723dbcd046b2ad18c682ff8ea6ce9aa7adf087df835037
-
SSDEEP
24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4e:qlbM2ZmVZPbILUYFYFyCJJze
Malware Config
Signatures
Files
-
b5d9455675791048c172e92af938be87eef0c3bc3ed52a0eff980a456907b770.exe windows x86
998383a0d3eee350ddb8b84d1cee40d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 813KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ