Static task
static1
Behavioral task
behavioral1
Sample
5433473d1c489aadac2e3035e8246d912cc502aa8239d7bf387a653e3d5146d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5433473d1c489aadac2e3035e8246d912cc502aa8239d7bf387a653e3d5146d2.exe
Resource
win10v2004-20220812-en
General
-
Target
5433473d1c489aadac2e3035e8246d912cc502aa8239d7bf387a653e3d5146d2
-
Size
36KB
-
MD5
5620eccf416042599a4f878e83846bf5
-
SHA1
e5c75a6acf1335537351ddd355ca21296e02d3a3
-
SHA256
5433473d1c489aadac2e3035e8246d912cc502aa8239d7bf387a653e3d5146d2
-
SHA512
9a57461d9d15b72bd00a00260b43fc8d1a0a9ba2ed9fb7e13da33a8df9b3786b639fa79dfbd9831cbda333ed9a93c2367b19673d1c9f87a3c29628830ab4c1e1
-
SSDEEP
384:i9sfJUQgLAybq2pUWP6DPtLmPedAvhthPIII4IIILRUSA3Ys8cAZ5F+YsFP50:isfJKrTpZSjtLeXvZwUShnUYsh
Malware Config
Signatures
Files
-
5433473d1c489aadac2e3035e8246d912cc502aa8239d7bf387a653e3d5146d2.exe windows x86
9565196c2bfd284b59de6266e08da5d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
modemui
drvGetDefaultCommConfigA
CountryRunOnce
drvCommConfigDialogA
kernel32
DeviceIoControl
GetGeoInfoA
GetNumberFormatW
GetModuleHandleA
CreateNamedPipeA
FormatMessageA
GetConsoleAliasW
GetBinaryTypeA
GetStringTypeA
WaitForSingleObject
GetAtomNameA
VirtualAllocEx
GetProcessHeap
GetLongPathNameA
GetPrivateProfileSectionA
lstrcmpiA
CloseHandle
GetFullPathNameA
advapi32
RegCreateKeyA
ControlService
RegDeleteValueA
CreateProcessAsUserA
RegCloseKey
RegFlushKey
ClearEventLogA
IsValidSecurityDescriptor
OpenServiceA
IsValidAcl
RegEnumValueA
RegQueryValueA
RegSaveKeyA
RegOpenKeyExA
InitializeSid
IsTextUnicode
user32
CharToOemA
PostMessageA
IsCharLowerW
LoadCursorA
DrawIcon
DialogBoxParamA
DispatchMessageA
CreateWindowExA
GetPropA
SetCursorPos
IsDialogMessageA
IsZoomed
nddeapi
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareGetInfoA
NDdeShareEnumA
NDdeShareAddA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ