Static task
static1
Behavioral task
behavioral1
Sample
5ebcd734e95914b5ca45bb7dfb5b61467e798fcbd66554ca62138c53c3dcf172.exe
Resource
win7-20220812-en
General
-
Target
5ebcd734e95914b5ca45bb7dfb5b61467e798fcbd66554ca62138c53c3dcf172
-
Size
186KB
-
MD5
a370bf7ceafc855124dd64809dc0fee0
-
SHA1
b1af34f9cf9ef087ca66b2a4a868847cefeb9ee2
-
SHA256
5ebcd734e95914b5ca45bb7dfb5b61467e798fcbd66554ca62138c53c3dcf172
-
SHA512
c58c60422bc7574142f8441780d9779bc5bc0080d628f90e318cad85f040f3e4b41d37a27e2f04ec6c9c11dbbcb31c4164526ae86346b444a56321b136ed14d0
-
SSDEEP
3072:4tk4CMlxAKd27bZDn1lbQKayN+i6Iljtmtb5rltETK25/xtTYgeVZf9T1pV2aLAB:4tk4D3dSbZj1lbZ+9IljtmCW25/xtTYq
Malware Config
Signatures
Files
-
5ebcd734e95914b5ca45bb7dfb5b61467e798fcbd66554ca62138c53c3dcf172.exe windows x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE