Static task
static1
Behavioral task
behavioral1
Sample
5d89409cd988ffe38d035bd45280d19458039ab1f12ef1301a7f1733b0c44f96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d89409cd988ffe38d035bd45280d19458039ab1f12ef1301a7f1733b0c44f96.exe
Resource
win10v2004-20220901-en
General
-
Target
5d89409cd988ffe38d035bd45280d19458039ab1f12ef1301a7f1733b0c44f96
-
Size
14KB
-
MD5
20da3ef7f6e9ebb163384f160b981212
-
SHA1
b12e1da3a69cb7ca97a5d337d5e8e8cf90c9046a
-
SHA256
5d89409cd988ffe38d035bd45280d19458039ab1f12ef1301a7f1733b0c44f96
-
SHA512
9492d981b377e9d4e56c67370305f0d591b0483c5e2dc5eac2218b27e6bcc9f567fea4764a21bca0e94a9d83566741481c24d102e0578d9b040d959a6002159b
-
SSDEEP
192:KdDfkCsqaJpfWFbpbotsGriFEVriYkuY89U8yTq6lbFcq:KdDfkC3anSytsFFEVuYkuo8D6rr
Malware Config
Signatures
Files
-
5d89409cd988ffe38d035bd45280d19458039ab1f12ef1301a7f1733b0c44f96.exe windows x86
a68ddf2f531a7963f23770e32e921f92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetFileAttributesA
GetCurrentThreadId
GetACP
TlsSetValue
GetSystemDefaultLCID
lstrcatA
TlsFree
GetModuleHandleW
GetCommandLineA
lstrcpyA
GetCurrentProcessId
FreeLibrary
GetDriveTypeA
GetModuleFileNameA
IsDBCSLeadByte
DeleteFileA
GetOEMCP
GetUserDefaultLCID
CreateSocketHandle
VirtualAlloc
user32
GetForegroundWindow
GetClassInfoExA
GetWindowDC
GetWindowTextA
CloseWindow
IsIconic
GetWindow
GetWindowTextLengthA
RegisterClassA
GetDC
IsWindowVisible
GetActiveWindow
GetFocus
ShowWindow
ReleaseDC
UpdateWindow
GetSystemMetrics
GetWindowLongA
ValidateRect
imagehlp
FindFileInPath
ImageLoad
BindImage
ImageNtHeader
CheckSumMappedFile
FindDebugInfoFile
oleacc
GetRoleTextA
DllRegisterServer
GetStateTextA
LresultFromObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ