Static task
static1
Behavioral task
behavioral1
Sample
b5ddfe2796a49acae2de33bd1e205f9bbe1932a9ef1acc0b038f58f74255b96e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b5ddfe2796a49acae2de33bd1e205f9bbe1932a9ef1acc0b038f58f74255b96e.exe
Resource
win10v2004-20220901-en
General
-
Target
b5ddfe2796a49acae2de33bd1e205f9bbe1932a9ef1acc0b038f58f74255b96e
-
Size
470KB
-
MD5
93135fcdca13678253027c636872ac98
-
SHA1
1e0eb583a2e771f9129fe75c2bc151664446a8fc
-
SHA256
b5ddfe2796a49acae2de33bd1e205f9bbe1932a9ef1acc0b038f58f74255b96e
-
SHA512
7adeb4899fdf6dd5810477e1001d8a4dd619fa6587824a135c077a0c44692eb27284580e23b7e6778c3b930b91c5627514c26eb37cb71dce17b736379bdb5866
-
SSDEEP
12288:S9F9/EicGkQj+NufW/Nx/EdDvl7aF9DUD+a:S9FSFE+NX/nwNcI
Malware Config
Signatures
Files
-
b5ddfe2796a49acae2de33bd1e205f9bbe1932a9ef1acc0b038f58f74255b96e.exe windows x86
30aac2ab9d186900ac3d3e0e15c8edf7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptReleaseContext
DuplicateTokenEx
RegCloseKey
kernel32
SystemTimeToFileTime
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharUpperW
CloseDesktop
DrawIcon
GetForegroundWindow
GetIconInfo
GetWindowLongA
LoadCursorA
PeekMessageA
SendMessageA
SetProcessWindowStation
Sections
.sfsrah Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lyx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vib Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ