Static task
static1
Behavioral task
behavioral1
Sample
5a816dbdf936910daa304e27d9085b5581ec57dda13209244b23da5a85276ec0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a816dbdf936910daa304e27d9085b5581ec57dda13209244b23da5a85276ec0.exe
Resource
win10v2004-20220812-en
General
-
Target
5a816dbdf936910daa304e27d9085b5581ec57dda13209244b23da5a85276ec0
-
Size
188KB
-
MD5
456de3c5ca2245c64ec65492b9bd03f0
-
SHA1
c74609db62cadbb150bd41a55e461e25e435e534
-
SHA256
5a816dbdf936910daa304e27d9085b5581ec57dda13209244b23da5a85276ec0
-
SHA512
537e29ab224907eb9730884f266a3e07e7692fdcac8db255d7e204aae341fd7171d92806c452502adc4c41351bcba1da39e29ddb2a002bede4b97723d09d3fc7
-
SSDEEP
3072:abrkco+AZw03pClHYNVuzqt3JaOgLhJwYf+HQSuMQz26rMfRp7dpXsVncrz:YodpCWNIqt3Zgtj+HQShQuf7dFMIz
Malware Config
Signatures
Files
-
5a816dbdf936910daa304e27d9085b5581ec57dda13209244b23da5a85276ec0.exe windows x86
c052a71373fc79cdbd5352b7ce346f95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
user32
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
advapi32
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegCreateKeyA
RegQueryValueA
Sections
.text Size: 168KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ