Static task
static1
Behavioral task
behavioral1
Sample
5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb.exe
Resource
win10v2004-20220812-en
General
-
Target
5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb
-
Size
800KB
-
MD5
93a272c541a560657ed60b4e97279650
-
SHA1
dfa55ed40a02f403d28fa0a948d192e0db4207fe
-
SHA256
5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb
-
SHA512
0dfefd6a2db5f04615ccc313c43d9678b690193d3c369bfdecf95ed0a7658a30c50046af19621ec840f5c1eb89afe0c8bec1c81861c56280432bec0f042a7138
-
SSDEEP
12288:0yQA48IBGcwtgT+seLki1ozgfXFVOs/QQRLM43tAlnwmSaTjSbGXZyJPjdP:0yQrDT+HLTxXFEERLMa4SaTeGpyp
Malware Config
Signatures
Files
-
5cd9df1fdc2c62508ad7d9aa67cdf31b5779174334a01229050f553d610822bb.exe windows x86
66f8e2008e3735ce31bc16bb10bcc46d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVersionExA
CreateDirectoryA
GetPriorityClass
lstrlenA
GetModuleFileNameA
GetPrivateProfileSectionA
GetStdHandle
HeapDestroy
GlobalSize
IsValidLocale
GetLocaleInfoA
GetCurrentThreadId
GetProcessHeap
GetPrivateProfileIntA
VirtualProtect
CreatePipe
ReadConsoleA
HeapSize
SuspendThread
SetEvent
GetModuleHandleA
GetFileAttributesW
ResumeThread
CreateMutexW
IsBadReadPtr
user32
LoadCursorA
PeekMessageA
DrawIcon
GetWindowLongA
GetWindowTextW
GetWindowLongA
DestroyIcon
DestroyMenu
GetScrollInfo
wsprintfA
SetCursor
DispatchMessageA
SetRect
duser
GetDebug
GetGadget
GetGadgetRect
GetGadgetFocus
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE