Static task
static1
Behavioral task
behavioral1
Sample
b5d3d643208e6081da4d6df997172c528686df28300b881a1aa5cd591dc5d8f6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5d3d643208e6081da4d6df997172c528686df28300b881a1aa5cd591dc5d8f6.exe
Resource
win10v2004-20221111-en
General
-
Target
b5d3d643208e6081da4d6df997172c528686df28300b881a1aa5cd591dc5d8f6
-
Size
138KB
-
MD5
691313e90c7dca5d5238d0d16681ef1b
-
SHA1
9d8d561ee1e78a1bf731e46b0d22743d66b1fdf2
-
SHA256
b5d3d643208e6081da4d6df997172c528686df28300b881a1aa5cd591dc5d8f6
-
SHA512
a8a842458e0342d8bf460b6f961c208fd2f390708478d58bdf68535ae1f7defe811f9cf7dee8650077c20785f88880da943eeb30018c08fde37905eae4507501
-
SSDEEP
3072:7u5GNrfg2f9TUeYa0O1/y6hVAI/9Dt+v8xO4+QrG9Z1r8OrjOmOr:fNl9weYPaVAIn+v8xOvru+O
Malware Config
Signatures
Files
-
b5d3d643208e6081da4d6df997172c528686df28300b881a1aa5cd591dc5d8f6.exe windows x86
5086bbf4865d63d90c5abdb600623dd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
inet_ntoa
user32
PeekMessageA
dnsapi
DnsFlushResolverCache
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
mpr
WNetGetUserA
wininet
HttpOpenRequestA
msvcrt
_strnicmp
advapi32
RegOpenKeyA
ole32
CLSIDFromProgID
oleaut32
SafeArrayCreate
Sections
.text Size: 130KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE