Static task
static1
Behavioral task
behavioral1
Sample
5b5ff8a5ff3db7afc8ec9d52ee1c0f29cdb4ed7c2d4ac86e0ed8526b2fbede5e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b5ff8a5ff3db7afc8ec9d52ee1c0f29cdb4ed7c2d4ac86e0ed8526b2fbede5e.exe
Resource
win10v2004-20220901-en
General
-
Target
5b5ff8a5ff3db7afc8ec9d52ee1c0f29cdb4ed7c2d4ac86e0ed8526b2fbede5e
-
Size
200KB
-
MD5
0010cf4514f8f5e28b6ef67901137d2b
-
SHA1
ef6fb5430ed4743d6a5a11ddbb0a2ba350c3a6d7
-
SHA256
5b5ff8a5ff3db7afc8ec9d52ee1c0f29cdb4ed7c2d4ac86e0ed8526b2fbede5e
-
SHA512
814b62d6dfa8b2bb154ecffd3a809b845002afbf74d36186bffbafb585e255908000cd1b621056a46ac3ae5e92ce1145f94e5e84cc2e2ab9c9c0c637a603a2e8
-
SSDEEP
3072:lMqUKLhuiwDs1wt1g3qjoW2l09P4m76rxbFnr0OXtX0k1J5:lM/iV1zY4s0Dr59N
Malware Config
Signatures
Files
-
5b5ff8a5ff3db7afc8ec9d52ee1c0f29cdb4ed7c2d4ac86e0ed8526b2fbede5e.exe windows x86
622188a54fc4405cc902a172abb48729
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcmpiA
IsDebuggerPresent
GetDriveTypeA
CopyFileA
GetProcessHeap
GetThreadLocale
GetModuleHandleW
DeleteFileA
GetCurrentThreadId
GetOEMCP
GetConsoleOutputCP
GetCurrentThread
GlobalFindAtomA
GetTickCount
SetLastError
GetVersion
lstrlenW
GetUserDefaultLangID
GetCurrentProcess
DeleteFileW
lstrcmpiW
Sleep
lstrcmpA
QueryPerformanceCounter
GetLastError
MulDiv
GetCommandLineA
RemoveDirectoryA
GetWindowsDirectoryA
GlobalFindAtomW
GetStartupInfoA
SetCurrentDirectoryA
GetModuleHandleA
LoadLibraryW
GetACP
GetCurrentProcessId
GetCommandLineW
VirtualAlloc
user32
GetSystemMetrics
GetDC
GetDesktopWindow
CharNextA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ