Static task
static1
Behavioral task
behavioral1
Sample
f005d9deaf56ef59de9697b54304506f0c987c360cc9fea2c45f62f8a5d6137f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f005d9deaf56ef59de9697b54304506f0c987c360cc9fea2c45f62f8a5d6137f.exe
Resource
win10v2004-20221111-en
General
-
Target
f005d9deaf56ef59de9697b54304506f0c987c360cc9fea2c45f62f8a5d6137f
-
Size
80KB
-
MD5
7cf3b0c54ddd88f8bcebc761136a40b5
-
SHA1
c647b91693460ca440d818314699493d2352348a
-
SHA256
f005d9deaf56ef59de9697b54304506f0c987c360cc9fea2c45f62f8a5d6137f
-
SHA512
6a45afc05f9a3ea37ee571f5e2f66ee87efcb646f6c1d7b0c8a6ecd44b1d4c041c57cf17f100c1c7d5ee9aca9c463b2b6c51b2d86f09f2a8c53f7a580e1ffd3a
-
SSDEEP
1536:0fB+PcWo/jY3u84pHkyCN8durxz5QzAXtA:OwudEy9d8B5C
Malware Config
Signatures
Files
-
f005d9deaf56ef59de9697b54304506f0c987c360cc9fea2c45f62f8a5d6137f.exe windows x86
85ea056ef7e39af80482e2468c5cb5bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
CloseHandle
GetFileAttributesW
GetCurrentProcess
CreateDirectoryW
GlobalLock
DeviceIoControl
GetPrivateProfileSectionA
GetCurrentThread
SetLastError
GetStdHandle
RemoveDirectoryW
VirtualProtectEx
GetModuleHandleA
LocalFlags
GetStringTypeA
GetPrivateProfileIntA
GetVersionExA
HeapFree
GetFileAttributesW
FindClose
user32
wsprintfW
DispatchMessageA
PostMessageW
GetWindowLongW
PeekMessageW
GetWindowTextW
IsWindow
SetFocus
IsCharLowerA
IsDialogMessageA
SetCursorPos
LoadCursorW
IsZoomed
ntmarta
AccGetExplicitEntries
AccFreeIndexArray
AccConvertAclToAccess
AccConvertSDToAccess
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ