Static task
static1
Behavioral task
behavioral1
Sample
f53b3f599193dd2704db71f5bbbb572c623f237ffb7ce2fec73158e9f7628c48.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f53b3f599193dd2704db71f5bbbb572c623f237ffb7ce2fec73158e9f7628c48.exe
Resource
win10v2004-20220812-en
General
-
Target
f53b3f599193dd2704db71f5bbbb572c623f237ffb7ce2fec73158e9f7628c48
-
Size
235KB
-
MD5
5143cd87933fe205179662cbc686ec70
-
SHA1
9651965adf40d140faf5347e5be4a2949cecac1f
-
SHA256
f53b3f599193dd2704db71f5bbbb572c623f237ffb7ce2fec73158e9f7628c48
-
SHA512
039cfa308013d9278dff6d7bf7baec1f4967d6721a7c4d7da5a015034d7f3bb40dfffaddbd2d3a7e490faee8ba7332fca054c3e1732745fd3fe720e070a9fcc4
-
SSDEEP
6144:cuC1mCSiGc+MtcF6p4KUU6ed4wMgok/XBgVJD:TlC/V3tJF4VhmxAR
Malware Config
Signatures
Files
-
f53b3f599193dd2704db71f5bbbb572c623f237ffb7ce2fec73158e9f7628c48.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 75KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE