Static task
static1
Behavioral task
behavioral1
Sample
5293e6358c7f459038f53f07e37755e3849222cf9f1bc5ec0d6cf378136f5d6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5293e6358c7f459038f53f07e37755e3849222cf9f1bc5ec0d6cf378136f5d6b.exe
Resource
win10v2004-20220812-en
General
-
Target
5293e6358c7f459038f53f07e37755e3849222cf9f1bc5ec0d6cf378136f5d6b
-
Size
796KB
-
MD5
92b12e114e1cac7969eb568311b1e9f0
-
SHA1
6aeeb7bb679ff0dbf4547e0e12a6a29307a28e21
-
SHA256
5293e6358c7f459038f53f07e37755e3849222cf9f1bc5ec0d6cf378136f5d6b
-
SHA512
bd8b92a33dc5793bf91677bdc41aad7c4358ccf5ad6e91807bb9a4f992b3057ba515a955fc1dd3ddfd2703267b8527332cb171325ed601d3054e83cd8df97ae9
-
SSDEEP
12288:9OumHOfwW4JKUFWhbllqxnpp65AmGBv8lwEXp38thYVGjgJ9KXD/l42fQXCB:YumHJrziRcxXUATvAwUGjuKTe2fsCB
Malware Config
Signatures
Files
-
5293e6358c7f459038f53f07e37755e3849222cf9f1bc5ec0d6cf378136f5d6b.exe windows x86
ef2eb5bc55ffe03f9e6ba1729edb57f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
MapViewOfFile
SetLastError
ReleaseMutex
FindClose
RemoveDirectoryA
GetModuleHandleA
HeapSize
FindResourceA
CreateMailslotW
GetStdHandle
GetLocaleInfoA
CancelIo
GetCommandLineA
GetDriveTypeW
CreateDirectoryA
GetExitCodeThread
IsBadWritePtr
ResetEvent
VirtualProtect
GetFileAttributesA
user32
PeekMessageA
wsprintfA
IsDialogMessageA
LoadCursorA
DispatchMessageA
PostMessageW
DestroyMenu
SetCursor
SetFocus
GetCapture
LoadImageW
GetWindowTextW
GetWindowLongW
ipsmsnap
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ