Static task
static1
Behavioral task
behavioral1
Sample
5e72747a30a393f404ed0ddbf313b93ef613211524c99477e59900b6148c4d10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e72747a30a393f404ed0ddbf313b93ef613211524c99477e59900b6148c4d10.exe
Resource
win10v2004-20220812-en
General
-
Target
5e72747a30a393f404ed0ddbf313b93ef613211524c99477e59900b6148c4d10
-
Size
392KB
-
MD5
2716d1b221db32ddc1db150e94318ae0
-
SHA1
907428c50e69f8ac39d3cffa18ac70d35997fd0d
-
SHA256
5e72747a30a393f404ed0ddbf313b93ef613211524c99477e59900b6148c4d10
-
SHA512
4f49288bdab13639e875ba52f083c9898fa8dea5cc05108cc9a247b68e048afe1e20efe1cd914b37862dfa9dee90d23c715c4c15209c2ac91ed0a42e74976762
-
SSDEEP
6144:e2WvEBApuMkrc7mRnQzpCMstSRe4WnmI0zqFbYHSieZzHlwtdF+Nw5ViXQelKevU:e2WvXuMk47mVSQPCesdqcLgHlQFoRQS
Malware Config
Signatures
Files
-
5e72747a30a393f404ed0ddbf313b93ef613211524c99477e59900b6148c4d10.exe windows x86
72c63736ff000487a23717a93862c121
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidLocale
GetCurrentThreadId
OpenEventW
HeapDestroy
GetModuleFileNameA
CreateFileW
GetStdHandle
CreateFileW
GetModuleHandleA
SuspendThread
LeaveCriticalSection
ResumeThread
GetVersionExA
GetFileAttributesW
GetTickCount
VirtualProtect
SetEvent
AddAtomW
CreateMutexA
InterlockedExchange
lstrlenA
LocalFlags
GetLocaleInfoA
SetFilePointer
CreateDirectoryA
user32
MessageBoxA
DestroyIcon
SetRect
DestroyMenu
DispatchMessageA
wsprintfA
GetWindowLongA
IsMenu
GetWindowLongA
IsMenu
GetWindowTextA
PeekMessageA
LoadCursorA
dplayx
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 387KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE