Static task
static1
Behavioral task
behavioral1
Sample
5da5ead95caebdd45be0d1470095f06b804c34274bb5c2bd97b338cb8d0df4d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5da5ead95caebdd45be0d1470095f06b804c34274bb5c2bd97b338cb8d0df4d0.exe
Resource
win10v2004-20220812-en
General
-
Target
5da5ead95caebdd45be0d1470095f06b804c34274bb5c2bd97b338cb8d0df4d0
-
Size
97KB
-
MD5
0b719c7d6df460c93d5bc8f89fd6b898
-
SHA1
57023688fa6d2af66ead3baebeb7b3c18aa5b2dc
-
SHA256
5da5ead95caebdd45be0d1470095f06b804c34274bb5c2bd97b338cb8d0df4d0
-
SHA512
f83bd340e3eee6e05d55ccdfc8dd3af4be40312dd842d7d5a2880699fd901e0e92685a11ac30def1d0c1af9e4937de8e5252ff10509bfca48fe6077af3b84a0b
-
SSDEEP
1536:I/ZY3o6aPe/5snKgpB0q9feGm+/lOOwLygmuxOcsFfaS+6:lo6aPeinVgq9fVt/lOzLtmuxfsFfa76
Malware Config
Signatures
Files
-
5da5ead95caebdd45be0d1470095f06b804c34274bb5c2bd97b338cb8d0df4d0.exe windows x86
a99046b30a817d7946f6fa96c6ce773b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
VirtualProtect
GetModuleHandleA
GlobalHandle
GetTickCount
CompareFileTime
lstrcpynA
IsBadWritePtr
user32
WinHelpA
GetCursorPos
SendMessageA
GetSysColor
ClientToScreen
GetSysColorBrush
CharLowerA
DestroyIcon
GetFocus
SystemParametersInfoA
GetMenuItemCount
PeekMessageA
msvcrt
_initterm
_mbsicmp
strncat
memset
_adjust_fdiv
_ismbblead
_XcptFilter
__set_app_type
_flsbuf
__p__fmode
__p__commode
_snprintf
__getmainargs
__setusermatherr
_except_handler3
_acmdln
exit
sqrt
getenv
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
ExtractAssociatedIconW
ShellExecuteW
ShellExecuteExA
SHGetMalloc
DragQueryFileW
SHFileOperationA
SHGetFolderLocation
SHBrowseForFolderW
SHGetPathFromIDList
DragAcceptFiles
comctl32
ImageList_DragEnter
ImageList_GetIcon
CreateStatusWindowA
ImageList_ReplaceIcon
ImageList_SetIconSize
DestroyPropertySheetPage
ImageList_EndDrag
ImageList_SetBkColor
PropertySheetA
ImageList_Draw
oleaut32
VariantClear
GetErrorInfo
LoadTypeLib
SafeArrayGetUBound
SetErrorInfo
SysStringLen
ole32
CoGetClassObject
CreateItemMoniker
PropVariantClear
CoGetMalloc
CoSetProxyBlanket
CoTaskMemAlloc
ReleaseStgMedium
CoReleaseMarshalData
advapi32
RegQueryValueA
EqualSid
CryptAcquireContextA
AllocateAndInitializeSid
SetSecurityDescriptorGroup
RegQueryValueExW
RegQueryInfoKeyW
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE