Static task
static1
Behavioral task
behavioral1
Sample
5bf645aec00f6ffcdbb0a35b97a4a4d5c40c023a54e0df12cb01dfc7f646f914.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bf645aec00f6ffcdbb0a35b97a4a4d5c40c023a54e0df12cb01dfc7f646f914.exe
Resource
win10v2004-20220901-en
General
-
Target
5bf645aec00f6ffcdbb0a35b97a4a4d5c40c023a54e0df12cb01dfc7f646f914
-
Size
1003KB
-
MD5
e7ef0ea69c00dc6521be45b556535167
-
SHA1
d52a3fa5d1cca0d318b594a00a86f440126dd901
-
SHA256
5bf645aec00f6ffcdbb0a35b97a4a4d5c40c023a54e0df12cb01dfc7f646f914
-
SHA512
99cb5df798718f85fcf9ddfde358bb6877d4f328e87f8d82270410dd556523dea52caacdd62298f13a9b98d3266b799e22f1f50c79b09755398615a30b5c8eec
-
SSDEEP
24576:LwyB0PjZfEa5gk2GfcWZfpePwTWe23Q1v1zv:rBXa6p8pmwTAQp
Malware Config
Signatures
Files
-
5bf645aec00f6ffcdbb0a35b97a4a4d5c40c023a54e0df12cb01dfc7f646f914.exe windows x86
e8ae1e5a7111f7ed0180966366d92c23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
OleTranslateColor
VarI1FromI4
kernel32
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
InterlockedIncrement
MultiByteToWideChar
TerminateProcess
Sections
.text Size: 874KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.version Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ