Static task
static1
Behavioral task
behavioral1
Sample
5d8b707abefd806cf084ad2292cbc3ddc73f62c79403416b14d47291bb96d6ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d8b707abefd806cf084ad2292cbc3ddc73f62c79403416b14d47291bb96d6ac.exe
Resource
win10v2004-20220812-en
General
-
Target
5d8b707abefd806cf084ad2292cbc3ddc73f62c79403416b14d47291bb96d6ac
-
Size
180KB
-
MD5
93242156d27fb2c5123eb9a00ddbc8a0
-
SHA1
34777b34aa1ac40bce1d25e29950ee4abc695a78
-
SHA256
5d8b707abefd806cf084ad2292cbc3ddc73f62c79403416b14d47291bb96d6ac
-
SHA512
8f4510d66f05ecd949bee766820c01fed7ab822561eb9b6659a9bb3c04855d52c5ff393b572a9b0c68193668cdb3772124d66025c8186395f30ed582a03c8e18
-
SSDEEP
1536:Yh9+OfX2i1cx7up0R62Izzq7vqniVujEh7QHXUlF:0//1cx7ueFt+oh7QHElF
Malware Config
Signatures
Files
-
5d8b707abefd806cf084ad2292cbc3ddc73f62c79403416b14d47291bb96d6ac.exe windows x86
0218a91536de25f7a3ec970dec93b18c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
TerminateProcess
FreeLibrary
GetCommandLineA
InterlockedDecrement
ReadFile
CreateFileW
VirtualFree
ExitProcess
InterlockedIncrement
LocalFree
GetModuleHandleW
SetLastError
ReadFile
LocalFree
GetCommandLineA
GetACP
MultiByteToWideChar
GetSystemTimeAsFileTime
GetLastError
GetVersionExA
VirtualFree
HeapReAlloc
Sleep
GetProcAddress
HeapFree
ExitProcess
CreateThread
LocalFree
HeapDestroy
HeapReAlloc
CreateFileW
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE