Static task
static1
Behavioral task
behavioral1
Sample
31fd553b7cb836e74a784aa57f895ffe24cb26cfdbb2c33e4c9710e7566ff2c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31fd553b7cb836e74a784aa57f895ffe24cb26cfdbb2c33e4c9710e7566ff2c5.exe
Resource
win10v2004-20220812-en
General
-
Target
31fd553b7cb836e74a784aa57f895ffe24cb26cfdbb2c33e4c9710e7566ff2c5
-
Size
30KB
-
MD5
19b46a09da4d771c8c2efedf247063e0
-
SHA1
8214ee088d7af5ea0c618d51ef68ef0646daefdd
-
SHA256
31fd553b7cb836e74a784aa57f895ffe24cb26cfdbb2c33e4c9710e7566ff2c5
-
SHA512
18038c34cf8296416ae37870d26822844148fbc3e0431fb25745bdf25a517ac83e65e3dc38c2710d5cce3afea6306540a3228208221922e3d2214df767e8c073
-
SSDEEP
768:OBt0EMeOaywQ2nuISJScYjFltW+evgWf7TExR:OBi6QAEzCFlLevgWPEx
Malware Config
Signatures
Files
-
31fd553b7cb836e74a784aa57f895ffe24cb26cfdbb2c33e4c9710e7566ff2c5.exe windows x86
f4bb95a2ed29767e199a8a83e34ea89d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
user32
FindWindowW
PostMessageW
shell32
SHLoadInProc
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE