Static task
static1
Behavioral task
behavioral1
Sample
5aff829958236161de6bb09f79fbaca83826914b6d41af47988f506ca8e8344d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5aff829958236161de6bb09f79fbaca83826914b6d41af47988f506ca8e8344d.exe
Resource
win10v2004-20220901-en
General
-
Target
5aff829958236161de6bb09f79fbaca83826914b6d41af47988f506ca8e8344d
-
Size
62KB
-
MD5
82af95cde4f4372785a164ed7884b270
-
SHA1
e86d04544cfe7360ada9536544657faa50ce78c5
-
SHA256
5aff829958236161de6bb09f79fbaca83826914b6d41af47988f506ca8e8344d
-
SHA512
1af161649dcdc364b96228445772cdc2972c97270940ebd5296aae255670d9bb39323188b917f735dbf8cf841f7a8d622e95154e8f051f27489d6ac5292aab3e
-
SSDEEP
1536:NLPf316rJ735celA1wN2ByGfiH5ZKcXqhDZ:NbsJ7JXCrByGfiH31X2
Malware Config
Signatures
Files
-
5aff829958236161de6bb09f79fbaca83826914b6d41af47988f506ca8e8344d.exe windows x86
10fc51a531af9561203a0dcf3531d233
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BasepCheckWinSaferRestrictions
GetCurrentActCtx
GetLocalTime
InitializeCriticalSectionAndSpinCount
BackupWrite
GetEnvironmentStringsA
CreateRemoteThread
WritePrivateProfileStringW
GlobalAddAtomA
DeleteFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE