Static task
static1
Behavioral task
behavioral1
Sample
5f15a32ecfb4e84d960834d75938cdaf77ab7680606c7fa96e52bb2d5bc11476.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5f15a32ecfb4e84d960834d75938cdaf77ab7680606c7fa96e52bb2d5bc11476.exe
Resource
win10v2004-20220812-en
General
-
Target
5f15a32ecfb4e84d960834d75938cdaf77ab7680606c7fa96e52bb2d5bc11476
-
Size
2.7MB
-
MD5
5d2c6031ce908a51bfdbea975d075dac
-
SHA1
59b15a44c5f2bc76af5e2d32d2922a6fa2dfec0e
-
SHA256
5f15a32ecfb4e84d960834d75938cdaf77ab7680606c7fa96e52bb2d5bc11476
-
SHA512
953076e66bfb405ee1633c522ba825e41ceeebb233919a3eae26b1c460149b6b62a8d539ff7626c13f8bb1069139e28f48beaf93e0c26b18757e9d3941a2f652
-
SSDEEP
49152:/ruUbVItuK/75zxlXuD4nzzqJHBGlVkj1POjxH+I77YxX06/xDS:jfVElzxlXuEzmJHBGshPpt02DS
Malware Config
Signatures
Files
-
5f15a32ecfb4e84d960834d75938cdaf77ab7680606c7fa96e52bb2d5bc11476.exe windows x86
57b1fbfee1a727922e91c3cb2273879b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wsock32
__WSAFDIsSet
version
GetFileVersionInfoW
winmm
timeGetTime
comctl32
ImageList_Destroy
mpr
WNetUseConnectionW
wininet
InternetReadFile
psapi
GetProcessMemoryInfo
iphlpapi
IcmpCreateFile
userenv
UnloadUserProfile
uxtheme
IsThemeActive
user32
SetWindowPos
gdi32
SetPixel
comdlg32
GetSaveFileNameW
advapi32
GetAclInformation
shell32
DragQueryPoint
ole32
CoTaskMemAlloc
oleaut32
RegisterTypeLi
Sections
.text Size: 342KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE