Static task
static1
Behavioral task
behavioral1
Sample
5eed6039d5073f26a4b347dfb2379d4c72d391a020f01ba2faf7fe2698c5b979.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5eed6039d5073f26a4b347dfb2379d4c72d391a020f01ba2faf7fe2698c5b979.exe
Resource
win10v2004-20220812-en
General
-
Target
5eed6039d5073f26a4b347dfb2379d4c72d391a020f01ba2faf7fe2698c5b979
-
Size
37KB
-
MD5
4dbdf9e73db481b001774b8b9b522ebe
-
SHA1
a24a01345a2cfd13dbb0f4cbc2854d5997841318
-
SHA256
5eed6039d5073f26a4b347dfb2379d4c72d391a020f01ba2faf7fe2698c5b979
-
SHA512
cba98c9ecced6a33a2d18a5a0cf1cc335ed9a8e79e4c4a8cbc3285a9c1b72f0492ea4da26500cb948fe9fed26d21a72c2a7a4ab2ca29507f887e59940302d117
-
SSDEEP
384:SBwWH9eRJ6tZpZcezC9vMg/TCLjNqEaVn1hu+U06XSoZcWqWJ:sHcGZcezC5lG/M1ToZP
Malware Config
Signatures
Files
-
5eed6039d5073f26a4b347dfb2379d4c72d391a020f01ba2faf7fe2698c5b979.exe windows x86
243052b10dc0b63803fa6ac15c2035a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
LoadAcceleratorsW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
EndDialog
LoadStringW
PostQuitMessage
LoadCursorW
RegisterClassExW
SendMessageW
PostMessageW
DefWindowProcW
DialogBoxParamW
BeginPaint
GetClientRect
EndPaint
CreateWindowExW
kernel32
Sleep
GlobalSize
CreateThread
WaitForSingleObject
GlobalAlloc
GetModuleHandleA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetStartupInfoA
GetCommandLineW
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
wtsapi32
WTSSetUserConfigA
WTSSendMessageA
crtdll
__GetMainArgs
_initterm
_acmdln_dll
_commode_dll
_XcptFilter
_exit
??2@YAPAXI@Z
_fmode_dll
_global_unwind2
_local_unwind2
exit
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ