Static task
static1
Behavioral task
behavioral1
Sample
5c958f43082ac68feada253a905089f41e4b31b6656a36244af99a02155f8627.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c958f43082ac68feada253a905089f41e4b31b6656a36244af99a02155f8627.exe
Resource
win10v2004-20220812-en
General
-
Target
5c958f43082ac68feada253a905089f41e4b31b6656a36244af99a02155f8627
-
Size
2.5MB
-
MD5
09862777ccc61f3d123f1adf8c6d358f
-
SHA1
1d1e162febf065a674c618762117d84a5aae27ce
-
SHA256
5c958f43082ac68feada253a905089f41e4b31b6656a36244af99a02155f8627
-
SHA512
009cf306b79273aab7c7b053e31c21dcfa7d0285bb0776795fcf3d1a14360f1366c3de924b2e84e629c5a8490c7b924e410330fae1b2aab1c2c1e5c0a950514d
-
SSDEEP
24576:diS5NaijUtdUjs7OqIJxDr6Bpn4LOD6I4LOD6PZGom9+K0O1fTD4XSLvjzJZKXNa:dihZzU/Jdlp1pHvO1fTcXSTjV0oi+us
Malware Config
Signatures
Files
-
5c958f43082ac68feada253a905089f41e4b31b6656a36244af99a02155f8627.exe windows x86
13861c6e8edaee5dbca0bd49e2231d79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
SafeArrayPtrOfIndex
advapi32
RegQueryValueExW
RegUnLoadKeyW
user32
LoadStringW
CreateWindowExW
kernel32
lstrcmpiA
TlsSetValue
lstrcpyW
Sleep
OpenThread
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
winspool.drv
OpenPrinterW
GetDefaultPrinterW
msvcrt
free
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ