Static task
static1
Behavioral task
behavioral1
Sample
b5e67032c0691a5e04f4dfa0875f5f4cbde1d404a92862549bc696c8ae66aedd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5e67032c0691a5e04f4dfa0875f5f4cbde1d404a92862549bc696c8ae66aedd.exe
Resource
win10v2004-20220812-en
General
-
Target
b5e67032c0691a5e04f4dfa0875f5f4cbde1d404a92862549bc696c8ae66aedd
-
Size
109KB
-
MD5
937c7f77e2fc734c1b29d8fa47ae822b
-
SHA1
3a15d86482664578fd665704efd5d5d6a8b5c9a4
-
SHA256
b5e67032c0691a5e04f4dfa0875f5f4cbde1d404a92862549bc696c8ae66aedd
-
SHA512
4021dc5a2c722a61223d78668d54f8602998aa2fe77cf7315de8d9f28ac2698da9819ec69b057c185a38d448660a3f50320c8a8d9a722a353ab4175c37659908
-
SSDEEP
3072:/M/Z33Fgb+b2/jQqhBbjjrdbqOD7bBbrk7:Ukai/hBhqOD792
Malware Config
Signatures
Files
-
b5e67032c0691a5e04f4dfa0875f5f4cbde1d404a92862549bc696c8ae66aedd.exe windows x86
7125e3a08d569ec06561da445cf8f479
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetUserDefaultLCID
GetVersion
RtlMoveMemory
GetSystemDirectoryW
GetStdHandle
LoadResource
DeleteFileA
SetFileAttributesA
GetStringTypeA
GetCommandLineW
SetEnvironmentVariableA
GetFullPathNameA
GetConsoleMode
MultiByteToWideChar
QueryPerformanceCounter
GetStringTypeExA
GetProcAddress
lstrcpynA
FormatMessageA
VirtualProtect
GetCurrentThread
GetFileType
GetTempPathA
GetThreadLocale
GetSystemDirectoryA
SetFileTime
GetModuleHandleA
SystemTimeToFileTime
SizeofResource
msvcrt
_XcptFilter
__getmainargs
_controlfp
_initterm
__p___initenv
tan
_adjust_fdiv
__p__fmode
__set_app_type
_exit
__p__commode
_except_handler3
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ysyhi Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ