Static task
static1
Behavioral task
behavioral1
Sample
5b15ba0bf5569e500b82a4b5d1c7e5959360484162330044a10598e6ff7ccf9c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b15ba0bf5569e500b82a4b5d1c7e5959360484162330044a10598e6ff7ccf9c.exe
Resource
win10v2004-20221111-en
General
-
Target
5b15ba0bf5569e500b82a4b5d1c7e5959360484162330044a10598e6ff7ccf9c
-
Size
73KB
-
MD5
ace928c3371e5997c24f00e2a279c5b8
-
SHA1
08743436084f9f39229dd1c4a3cb1e5044b40a42
-
SHA256
5b15ba0bf5569e500b82a4b5d1c7e5959360484162330044a10598e6ff7ccf9c
-
SHA512
361a42d55aa6301625dc8d256f4bf071d714ff63457f05b57cf714650fed0580a84c1805003e479e84d8b5e28876b7a74b7d2fdf8ce39331c9e4054e45a1a807
-
SSDEEP
1536:WXWQh550uIH9Gx0burIwIgewhquTC8XXO+JCEfnlSlpM2:WXWM52ug0KbrwlDjXXO+JCalopM2
Malware Config
Signatures
Files
-
5b15ba0bf5569e500b82a4b5d1c7e5959360484162330044a10598e6ff7ccf9c.exe windows x86
12d4930fbe90bbd75beeaa3b8d27fbea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Module32NextW
GetDefaultCommConfigW
VirtualBufferExceptionHandler
lstrcpyA
FindCloseChangeNotification
BaseUpdateAppcompatCache
lstrcpy
CancelIo
MultiByteToWideChar
DuplicateHandle
SetConsoleScreenBufferSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 58KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE