Static task
static1
Behavioral task
behavioral1
Sample
5d45a387ff3db4cab5de1bcba94ecd073b44a7b41a0c93ce1abf1394e7ae1ba6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d45a387ff3db4cab5de1bcba94ecd073b44a7b41a0c93ce1abf1394e7ae1ba6.exe
Resource
win10v2004-20221111-en
General
-
Target
5d45a387ff3db4cab5de1bcba94ecd073b44a7b41a0c93ce1abf1394e7ae1ba6
-
Size
311KB
-
MD5
52791923e352cc5be0cfce6c479daac0
-
SHA1
d36c7959fa387795803dfa4b58c623dfb91113f3
-
SHA256
5d45a387ff3db4cab5de1bcba94ecd073b44a7b41a0c93ce1abf1394e7ae1ba6
-
SHA512
97ecc3d908328eb335d1dff623d74add320b973f85b96188aeed9b86787e25f9ad431b2517618ebd842cc6aa7fa4bc2a11b5ebbcd150a9168fbe4f4f042f63b6
-
SSDEEP
6144:hLtRhctVCnG5sW5tcVuFTxFtOZSdFCTSA2Th9OwOg:hLrhctVCnbWPmLZSdFCeA2ThHOg
Malware Config
Signatures
Files
-
5d45a387ff3db4cab5de1bcba94ecd073b44a7b41a0c93ce1abf1394e7ae1ba6.exe windows x86
759c3994cdf8514fc076946daa89c471
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryW
TlsGetValue
lstrlenA
SetLastError
FindAtomA
GetPrivateProfileIntW
HeapFree
SuspendThread
GetVolumePathNameA
CreateEventW
GetPrivateProfileSectionA
DeleteFileA
GetDriveTypeA
ResumeThread
CreateEventW
VirtualProtect
GetProcessVersion
GetStringTypeW
GetCurrentThread
CreateEventW
GetProcessHeap
clbcatq
SetupOpen
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
SetupOpen
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
SetupOpen
d3dramp
g_RampOld_BeadTbl
g_RampOld_BeadTbl
RampOldTri
RampOldTri
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 455B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE