Static task
static1
Behavioral task
behavioral1
Sample
5cb9144e9345dae6f55b8097a4c66ef48425cd3b07f077d4c0ca30dfe1688859.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5cb9144e9345dae6f55b8097a4c66ef48425cd3b07f077d4c0ca30dfe1688859.exe
Resource
win10v2004-20220812-en
General
-
Target
5cb9144e9345dae6f55b8097a4c66ef48425cd3b07f077d4c0ca30dfe1688859
-
Size
93KB
-
MD5
7c5ebe2d434bf1002efa9fc5e50238a0
-
SHA1
da71f4f91d6a7e46593141618d838ffbf0b8b3cb
-
SHA256
5cb9144e9345dae6f55b8097a4c66ef48425cd3b07f077d4c0ca30dfe1688859
-
SHA512
836a12046c19cb55059c37f77cb858f5f780b71ed760ffee254c9777a7043509fb7e58f6ff3ec5526d0be1ffa0d1d63f677b0d962e2bc9690cf6816ba5406fb9
-
SSDEEP
1536:0VsqJMXFYuioWqTOI2qFaozwApm+PhjyaVObLOS9IemMoOZk2oFzWr1o:0uqJluiVqSAaow01XAGemJ5Fo1o
Malware Config
Signatures
Files
-
5cb9144e9345dae6f55b8097a4c66ef48425cd3b07f077d4c0ca30dfe1688859.exe windows x86
6f8bceb12e0ad6987aeae44a8ba8b5a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvcrt
printf
shfolder
SHGetFolderPathA
ole32
CoInitializeEx
oleaut32
SysFreeString
user32
CallWindowProcA
gdi32
GetObjectA
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetOpenUrlA
version
GetFileVersionInfoSizeA
advapi32
OpenProcessToken
Sections
pec1 Size: 63KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE