Static task
static1
Behavioral task
behavioral1
Sample
5e856b114844e8fadb5386403f9616c57b26562d5e1b78570a0525699474d738.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5e856b114844e8fadb5386403f9616c57b26562d5e1b78570a0525699474d738.exe
Resource
win10v2004-20221111-en
General
-
Target
5e856b114844e8fadb5386403f9616c57b26562d5e1b78570a0525699474d738
-
Size
31KB
-
MD5
a0cba43f19b44e82f09155e1178a6818
-
SHA1
38185fa1c238354331b648cc1fc254510c4fb605
-
SHA256
5e856b114844e8fadb5386403f9616c57b26562d5e1b78570a0525699474d738
-
SHA512
6971d714f81ff9492a69e618768df462d372a34374bf92856225f9950d54e386fbaeadf50833c3a9a82cd4966a59fa9eed6ee9d46256fbb242683c681137266e
-
SSDEEP
192:tB+i4+4Dq00CMgbuw+/RUo04gnTz1j8Za2PT+6T70+BtONByKYK3nkMdDiHfqCnS:tB+pHz0CMgbWR44gnTz1XzdDi/qMG2
Malware Config
Signatures
Files
-
5e856b114844e8fadb5386403f9616c57b26562d5e1b78570a0525699474d738.exe windows x86
e2c540b5022634c1521d4d570aa5a33f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetModuleHandleA
GetProcessHeap
user32
ActivateKeyboardLayout
CreatePopupMenu
CreateWindowExA
DdeCreateDataHandle
DdeNameService
DispatchMessageA
DlgDirListComboBoxW
FrameRect
GetRawInputBuffer
GetAltTabInfoA
GetDC
GetMessageA
GetWindowRect
GrayStringW
InSendMessage
InsertMenuA
IsCharAlphaA
LoadIconA
MapVirtualKeyW
PostMessageA
RegisterClassA
SetWindowWord
SwitchDesktop
TranslateMessage
gdi32
DdEntry47
EngStretchBltROP
GdiInitSpool
PolyTextOutW
SetBrushAttributes
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 876B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ