Static task
static1
Behavioral task
behavioral1
Sample
52b889e78ddc84846108aa902bdb9d82be3cfe2416df05a98288973e0f207fbf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
52b889e78ddc84846108aa902bdb9d82be3cfe2416df05a98288973e0f207fbf.exe
Resource
win10v2004-20220901-en
General
-
Target
52b889e78ddc84846108aa902bdb9d82be3cfe2416df05a98288973e0f207fbf
-
Size
482KB
-
MD5
079288787413cd8bdd0534a5bd40297c
-
SHA1
5cd65014e4a75870fb9db3afd87d83529d30543a
-
SHA256
52b889e78ddc84846108aa902bdb9d82be3cfe2416df05a98288973e0f207fbf
-
SHA512
e933c6d13ba07743bde1599ce9e799291b6c07a58907da8d9a164fa8f64e068d65afaeeb8b5bcc5415648daa1d32aaa1325ea4ee6978c715144eea3679f517ce
-
SSDEEP
12288:whxdsvOMW04xOdPc6ze1/ajaQmvBvh5dvw7a:2xdsmxtF0O/aqv9G
Malware Config
Signatures
Files
-
52b889e78ddc84846108aa902bdb9d82be3cfe2416df05a98288973e0f207fbf.exe windows x86
df00c849e06ad79fc0c380f92257ccd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateMailslotW
FindAtomA
GetModuleHandleA
GetFileAttributesA
GetCommandLineA
HeapDestroy
GetPriorityClass
GetModuleFileNameA
SuspendThread
DeleteFileA
DeleteAtom
GetStartupInfoA
ReadFile
GetStdHandle
GetProcessTimes
IsBadCodePtr
HeapCreate
GetEnvironmentVariableA
CloseHandle
user32
SetFocus
GetWindowLongA
GetWindowInfo
GetSysColor
FindWindowA
DispatchMessageA
GetClassInfoA
GetKeyState
DestroyMenu
DispatchMessageA
DrawTextW
CallWindowProcW
IsZoomed
DestroyMenu
msident
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ