Static task
static1
Behavioral task
behavioral1
Sample
5f4464d1e9cdec63f0075caf12b19d5a8ce6c3d91108eca94aa619f568c174e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f4464d1e9cdec63f0075caf12b19d5a8ce6c3d91108eca94aa619f568c174e5.exe
Resource
win10v2004-20220812-en
General
-
Target
5f4464d1e9cdec63f0075caf12b19d5a8ce6c3d91108eca94aa619f568c174e5
-
Size
769KB
-
MD5
223f7e425bd28ae13a54b2d0017d1e81
-
SHA1
f4432caece5be253eb88db7cddf7236defcda392
-
SHA256
5f4464d1e9cdec63f0075caf12b19d5a8ce6c3d91108eca94aa619f568c174e5
-
SHA512
0876322e9451b000814438439e64437ac4a1b9d8667aed3008ce8d5976207a610833d83a644ecfb32bbb388d37d38a908f0e2c4d4845c3070229df1f1cc9f92a
-
SSDEEP
24576:XduiuUSV8fXxxIX7wKRAJAYLPUZu+FE3o:Xd8Uo8fBxIX5RAPUkEE
Malware Config
Signatures
Files
-
5f4464d1e9cdec63f0075caf12b19d5a8ce6c3d91108eca94aa619f568c174e5.exe windows x86
4f149a700bb53390d4223f1c17e37d7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CreateDirectoryW
DeleteFileA
CreateFileA
HeapFree
FindClose
RemoveDirectoryA
WriteFile
ReleaseSemaphore
GetDriveTypeA
GetModuleHandleA
CreateEventW
VirtualProtect
Beep
CreateFileMappingW
FindClose
ReleaseMutex
GetCommandLineA
lstrlenA
OpenEventA
WriteConsoleW
RemoveDirectoryA
GetTickCount
ResetEvent
GetFileType
user32
CreateIcon
PeekMessageA
DrawTextW
GetClassInfoA
MessageBoxA
GetWindowLongA
IsWindow
IsZoomed
GetSysColor
FindWindowA
DestroyMenu
DispatchMessageA
DestroyMenu
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ