Static task
static1
Behavioral task
behavioral1
Sample
5acfb6831247bde4c233bd9755f8912511dec99fa14273730d28c7bf0c4151e4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5acfb6831247bde4c233bd9755f8912511dec99fa14273730d28c7bf0c4151e4.exe
Resource
win10v2004-20220812-en
General
-
Target
5acfb6831247bde4c233bd9755f8912511dec99fa14273730d28c7bf0c4151e4
-
Size
2.4MB
-
MD5
88d4a4f51e13737e35a03d3a24062f80
-
SHA1
2b8571fad27de2534e6329634dee003b4ed6bec2
-
SHA256
5acfb6831247bde4c233bd9755f8912511dec99fa14273730d28c7bf0c4151e4
-
SHA512
31493eae56e16d500f0a8496eed08ad2924bd3ad51214e8701ff060ff0431937563e0067a009c00bf8bd22b37ff05d65b62bf5eaa46ffa5b84dcedec45fcc9d8
-
SSDEEP
49152:bMUwvJLc0lykOWJGrZ7HCbMXlTobY5OoaO96T9w:YUyJhOW8VC0lTok5JaO4w
Malware Config
Signatures
Files
-
5acfb6831247bde4c233bd9755f8912511dec99fa14273730d28c7bf0c4151e4.exe windows x86
1dbcf2c6cdfb8812f5650277b7998cf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
FreeSid
comctl32
ImageList_Add
comdlg32
PrintDlgA
gdi32
SaveDC
ole32
OleRun
oleaut32
VarNot
shell32
DragFinish
urlmon
HlinkNavigateString
version
VerQueryValueA
wininet
InternetOpenA
winmm
joyGetPos
winspool.drv
OpenPrinterA
wsock32
send
Sections
.text Size: 39KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE