Static task
static1
Behavioral task
behavioral1
Sample
5a4e4d0d8384a5c772194f8d8bcbea622d298e3c8905778c5096a63adedcdfd1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a4e4d0d8384a5c772194f8d8bcbea622d298e3c8905778c5096a63adedcdfd1.exe
Resource
win10v2004-20220812-en
General
-
Target
5a4e4d0d8384a5c772194f8d8bcbea622d298e3c8905778c5096a63adedcdfd1
-
Size
75KB
-
MD5
905d6ab58b9935fa63c1bd87e1ec4750
-
SHA1
296fda20bf988d8acded3539557bf56870ac3711
-
SHA256
5a4e4d0d8384a5c772194f8d8bcbea622d298e3c8905778c5096a63adedcdfd1
-
SHA512
4a236b0e6146e208851bc746f5cc203e28bc1e19014b8f57dda7443ef833a6a98f3c9abf224b7df28e5457df424f47499aeb5910366839143b644c8d08a43a62
-
SSDEEP
1536:iIv2M79moyxfV9Gf/EqTRiBB+ze98HbKu:yMBeUf8C8s33
Malware Config
Signatures
Files
-
5a4e4d0d8384a5c772194f8d8bcbea622d298e3c8905778c5096a63adedcdfd1.exe windows x86
f60122bc2f36c36fc4b40b76ee0178c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
RemoveDirectoryA
ResetEvent
CreateDirectoryA
CancelIo
IsBadWritePtr
GetExitCodeThread
VirtualProtect
MapViewOfFile
GetProcessHeap
CreateMailslotW
GetStdHandle
GetCommandLineA
GetLocaleInfoA
IsValidCodePage
FindResourceA
GetDriveTypeW
HeapSize
GetFileAttributesA
FindClose
SetLastError
user32
DestroyMenu
SetFocus
SetCursor
LoadImageW
wsprintfA
GetWindowLongW
PeekMessageA
GetWindowTextW
GetCapture
PostMessageW
DispatchMessageA
LoadCursorA
IsDialogMessageA
ipsmsnap
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ