Static task
static1
Behavioral task
behavioral1
Sample
5b20c3fe545ba484b921ef1aa7125536a93a475ced8725dcdce7e2a97f5f1dd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b20c3fe545ba484b921ef1aa7125536a93a475ced8725dcdce7e2a97f5f1dd5.exe
Resource
win10v2004-20221111-en
General
-
Target
5b20c3fe545ba484b921ef1aa7125536a93a475ced8725dcdce7e2a97f5f1dd5
-
Size
112KB
-
MD5
186b6df83a92b9f1787c044d8f05c2c6
-
SHA1
4d02fedd245f2df2cf0bf4e004132213f5786adf
-
SHA256
5b20c3fe545ba484b921ef1aa7125536a93a475ced8725dcdce7e2a97f5f1dd5
-
SHA512
d9aae65bbfa8d609557dc66204aaac071116b8ff58554076bdfe29b2818fef68ecfe3682a8a7cd9f940441be878bf20f0c959ac42499c19ee4c7deace2b34e94
-
SSDEEP
3072:sYFPwsGI3v4htp7eOt8VkHDARPLIPBmz:Rge4htp7e6M1T
Malware Config
Signatures
Files
-
5b20c3fe545ba484b921ef1aa7125536a93a475ced8725dcdce7e2a97f5f1dd5.exe windows x86
098dda0b76cee042ab65d9221ed720d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FindResourceA
GetModuleFileNameA
GetCurrentProcess
LocalAlloc
MultiByteToWideChar
GetProcessHeap
GetModuleHandleW
GetCommandLineA
GetModuleHandleA
GetCurrentProcess
GetModuleHandleA
WaitForSingleObject
GetModuleFileNameA
LocalAlloc
SetEvent
VirtualFree
LocalFree
GetCurrentThreadId
GetProcessHeap
GetProcessHeap
WaitForSingleObject
FormatMessageW
GetCommandLineW
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleA
GetCommandLineW
GetCurrentThreadId
user32
GetSystemMenu
GetDlgCtrlID
SetWindowPos
GetMessageW
KillTimer
EndPaint
DialogBoxParamW
SendDlgItemMessageW
EnableMenuItem
SetWindowPos
KillTimer
MoveWindow
GetDlgCtrlID
MoveWindow
SetWindowPos
GetSysColor
KillTimer
CheckDlgButton
EndPaint
CheckDlgButton
GetDlgCtrlID
EndPaint
GetMessageW
EnableMenuItem
GetSystemMetrics
GetCursorPos
BeginPaint
GetSystemMenu
PostMessageW
DialogBoxParamW
SetWindowPos
LoadImageW
KillTimer
CheckDlgButton
ntdll
NtAllocateVirtualMemory
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ