Static task
static1
Behavioral task
behavioral1
Sample
5abd22c55f24a5eb5f74eaae1e05595cfee5d367faa56daca2a615f20b65e452.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5abd22c55f24a5eb5f74eaae1e05595cfee5d367faa56daca2a615f20b65e452.exe
Resource
win10v2004-20221111-en
General
-
Target
5abd22c55f24a5eb5f74eaae1e05595cfee5d367faa56daca2a615f20b65e452
-
Size
744KB
-
MD5
747f8bd49ade620e22c28bd3926af337
-
SHA1
e3f6c195a425efc7bb60bba81c0881500a427fb8
-
SHA256
5abd22c55f24a5eb5f74eaae1e05595cfee5d367faa56daca2a615f20b65e452
-
SHA512
f161845257c57d90c4558f2b50bf8e58b92f65d6d3ada50e9ec3e82d3a19f2898648b5eabf7d6f2e1cb99114118f8471bafd86c9a58c6f4146e933713115cc8d
-
SSDEEP
12288:mqNW0qlMHjqRtZsypomFQdw9PHpGwqIwN6V3grReY/hVPF135F76:m0W0qyuR3FQdw9vHqIM6VwrReY/HvJF7
Malware Config
Signatures
Files
-
5abd22c55f24a5eb5f74eaae1e05595cfee5d367faa56daca2a615f20b65e452.exe windows x86
e5dbc6c972d9272fe36d291cfd6a4296
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
GetCommandLineA
WaitForSingleObject
SetFileAttributesA
GetFileSize
ReleaseMutex
FindVolumeClose
VirtualAlloc
IsBadReadPtr
SetEndOfFile
ResumeThread
CloseHandle
CreateFileA
FindAtomW
GetStdHandle
GetCurrentDirectoryA
ExitProcess
FindVolumeClose
DeleteFileA
GetVersion
EnterCriticalSection
GetEnvironmentVariableA
HeapSize
GetModuleHandleA
GetExitCodeThread
shell32
SHGetMalloc
SHGetSettings
StrChrA
SHGetDiskFreeSpaceA
DragFinish
DllUnregisterServer
SHFree
ShellAboutA
DuplicateIcon
ExtractIconA
ShellMessageBoxA
DragQueryFileA
DragAcceptFiles
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ