Static task
static1
Behavioral task
behavioral1
Sample
5d6a8a443acc6a88a8bbee69dbc2de1f072f97d254324068a2a29885da6d4ced.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d6a8a443acc6a88a8bbee69dbc2de1f072f97d254324068a2a29885da6d4ced.exe
Resource
win10v2004-20220812-en
General
-
Target
5d6a8a443acc6a88a8bbee69dbc2de1f072f97d254324068a2a29885da6d4ced
-
Size
796KB
-
MD5
0bacd21734bad9a80e9a2c83255e84e1
-
SHA1
91d0b238be3aafe97454e1382895765f5abc6ca7
-
SHA256
5d6a8a443acc6a88a8bbee69dbc2de1f072f97d254324068a2a29885da6d4ced
-
SHA512
9685a85217bd7651428bda6c27de9c22a6515ab8213a90d5ff1ffa7e65bdad8b5831167a1573c9fef439f4e27bf6e7ecd17c2672d3edce836bd2dbab1cbd8cf3
-
SSDEEP
12288:QWVwMI8m7goYMxAxx5qWnUoHYStAX/5WR/bWnWbwg7Bke/EajTD+mzSBrqVN6:ncp7gDBxZUoHYtX/KWnGVFkerD+m2v
Malware Config
Signatures
Files
-
5d6a8a443acc6a88a8bbee69dbc2de1f072f97d254324068a2a29885da6d4ced.exe windows x86
ee23925287a13113ca2343b195f8c879
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
GetStringTypeA
SetCommBreak
CreateDirectoryW
SetLastError
FindClose
GetCurrentThread
GetModuleHandleA
GetVersionExA
LocalFlags
GetPrivateProfileIntA
GetPrivateProfileSectionA
DeviceIoControl
CreateEventA
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetCurrentProcess
HeapFree
GlobalLock
GetFileAttributesW
user32
GetWindowTextW
IsZoomed
LoadCursorW
PostMessageW
SetFocus
FindWindowA
wsprintfW
IsDialogMessageA
PeekMessageW
GetWindowLongW
DispatchMessageA
IsWindow
SetCursorPos
msrating
DllCanUnloadNow
RatingCustomInit
RatingEnable
RatingInit
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ