?SequenceDocReportInputLowCase@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
05f7314529565f0c8267246b6434eaba4ccc64e3e62baa793771afe815fe8433.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
05f7314529565f0c8267246b6434eaba4ccc64e3e62baa793771afe815fe8433.exe
Resource
win10v2004-20221111-en
General
-
Target
05f7314529565f0c8267246b6434eaba4ccc64e3e62baa793771afe815fe8433
-
Size
146KB
-
MD5
0a5a47ebb9109eb67d99e40e21f74322
-
SHA1
eaf8ccdb99043fefc3ddfe6b2fbc53d094ba8a10
-
SHA256
05f7314529565f0c8267246b6434eaba4ccc64e3e62baa793771afe815fe8433
-
SHA512
bd49d2b42bffd64db2fc41b73d6fc3a89fa154551c090b564f22e5161b1db9f8b604a91df162b7571e5b0ae327f16b11d7adfaea4c1cf2cf16c09d54b0cf76d4
-
SSDEEP
3072:sxJY4/DcyFQ9AFeRRhz/PrYYFeFih8B6c6BKiGo:sxXJi9fw6c6y
Malware Config
Signatures
Files
-
05f7314529565f0c8267246b6434eaba4ccc64e3e62baa793771afe815fe8433.exe windows x86
5f5245ba17d18d467c02f4b07bff131a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathStripPathA
kernel32
TlsAlloc
user32
GetAsyncKeyState
Exports
Exports
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ico Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vcp Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pic Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ