Static task
static1
Behavioral task
behavioral1
Sample
5a5d5fc28d78d3036bea879e01d70b277aec7fc041fc1ab4bf4fe010d0c1b1e2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a5d5fc28d78d3036bea879e01d70b277aec7fc041fc1ab4bf4fe010d0c1b1e2.exe
Resource
win10v2004-20220812-en
General
-
Target
5a5d5fc28d78d3036bea879e01d70b277aec7fc041fc1ab4bf4fe010d0c1b1e2
-
Size
749KB
-
MD5
06f00dfbcb803219dc2130e49693b3bf
-
SHA1
71d87fdd03da9bfdc34947d72db18bdfdd04c303
-
SHA256
5a5d5fc28d78d3036bea879e01d70b277aec7fc041fc1ab4bf4fe010d0c1b1e2
-
SHA512
a70dde1f35856a0513da2e960c9f2d74372c8a3d0c561b089343880081f965e1eafceb34d3f09b976971d7ec2d5f9914b3711ae9834ecaca69bcc2c01043a7da
-
SSDEEP
12288:S9D570P041U0uXaZ9kDHQALFnnv3ZxuKPpdAU8N3I6vnzw00pbbKzVv8K:+DQTLu4kDwul3l3m3IEE8zS
Malware Config
Signatures
Files
-
5a5d5fc28d78d3036bea879e01d70b277aec7fc041fc1ab4bf4fe010d0c1b1e2.exe windows x86
d4ba28ef9ac95bf11fa3ae24facbf3c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetSystemTime
CreateDirectoryA
GetCommandLineA
ResetEvent
VirtualProtectEx
FindClose
ExitThread
FindClose
CreateEventA
ReleaseMutex
WriteConsoleA
WriteFile
SetEvent
GetVersion
SetVolumeLabelW
GetDriveTypeW
GetModuleHandleA
RemoveDirectoryA
IsBadCodePtr
SetStdHandle
CreateMailslotA
FindAtomA
HeapFree
GetFileType
uxtheme
DrawThemeBackground
OpenThemeData
GetThemeTextMetrics
SetWindowTheme
GetThemeTextExtent
GetThemeRect
GetThemeColor
GetThemeSysSize
GetWindowTheme
CloseThemeData
CloseThemeData
DrawThemeEdge
IsThemeActive
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ