Static task
static1
Behavioral task
behavioral1
Sample
53ab3b3381e74505c4b8d1c399684e48b78d41877cd227715a9c3479064b0cdb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
53ab3b3381e74505c4b8d1c399684e48b78d41877cd227715a9c3479064b0cdb.exe
Resource
win10v2004-20221111-en
General
-
Target
53ab3b3381e74505c4b8d1c399684e48b78d41877cd227715a9c3479064b0cdb
-
Size
2.0MB
-
MD5
64ba3bab5e651ea7423ad3cdc2ffca4f
-
SHA1
6a33e0d6a2cefd283ce6104395202b661440df57
-
SHA256
53ab3b3381e74505c4b8d1c399684e48b78d41877cd227715a9c3479064b0cdb
-
SHA512
4b4e8168fe0caac58c3bf39f855fddf4ed8479880fdff4d063a3eacc0c81de760f4e5e7751b9b3ee705e6d54768454e014605fb540c49b1532a32a14cc7f6238
-
SSDEEP
49152:yNnYuf07xGV0mXvco1ZG/yk2PYeit8CaRDTLg:eYH4Vhv+6YeiJIDTLg
Malware Config
Signatures
Files
-
53ab3b3381e74505c4b8d1c399684e48b78d41877cd227715a9c3479064b0cdb.exe windows x86
71aa6bf7d27a2204350e771e502611ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
user32
DestroyWindow
msvcrt
_wcsicmp
psapi
GetMappedFileNameW
advapi32
RegCloseKey
shell32
SHGetFolderPathW
Sections
.text Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.chdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.chdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ