Static task
static1
Behavioral task
behavioral1
Sample
5d393ac741a938ad7c33567df1dfe82c9bfe12b4ecfacf86ca9362bf1846e0c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d393ac741a938ad7c33567df1dfe82c9bfe12b4ecfacf86ca9362bf1846e0c7.exe
Resource
win10v2004-20220901-en
General
-
Target
5d393ac741a938ad7c33567df1dfe82c9bfe12b4ecfacf86ca9362bf1846e0c7
-
Size
688KB
-
MD5
cac0e8d55398b0834ef798f5b03c5921
-
SHA1
0c9a9c745d89b63a40c6a804e3b06ec26c46ac39
-
SHA256
5d393ac741a938ad7c33567df1dfe82c9bfe12b4ecfacf86ca9362bf1846e0c7
-
SHA512
748873548d86e7363923acc82e6ddfd8e440946e2e036681961dfff1312443dee469ba77d8d6c6278e66d81922441b21961c508d8c255cafce4168571dcd69fa
-
SSDEEP
12288:o5Invap7CV59EWMZmRSQL7SGOf9U0AJo9fKRxmO+Bhk8wfq1lKouVhbbtpz:o5VpW59jMZmRxL7SGOOoyvf+BhofqmVf
Malware Config
Signatures
Files
-
5d393ac741a938ad7c33567df1dfe82c9bfe12b4ecfacf86ca9362bf1846e0c7.exe windows x86
73ec795c6c369c6ce2c3b4c3f6477daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 424KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 44KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
2 Size: 40KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4 Size: 48KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE