Static task
static1
Behavioral task
behavioral1
Sample
d5c9cce6e1cac73a2f39d20105dccd3808d3bb98a9da304a20cf6cb30052b981.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5c9cce6e1cac73a2f39d20105dccd3808d3bb98a9da304a20cf6cb30052b981.exe
Resource
win10v2004-20220812-en
General
-
Target
d5c9cce6e1cac73a2f39d20105dccd3808d3bb98a9da304a20cf6cb30052b981
-
Size
460KB
-
MD5
ad1fbf4bd151e7d15210a1825d5f09e4
-
SHA1
32f5e56271ad25af3c1ef94df6cf3db010508d8d
-
SHA256
d5c9cce6e1cac73a2f39d20105dccd3808d3bb98a9da304a20cf6cb30052b981
-
SHA512
9dca92e995069ab65a4455d861b86d53203ab166a001eaeaa5764fcc0dea4400326bb4efa491f46931868779d0459c635b332d97c5f7642d800d93901b4fe524
-
SSDEEP
6144:7sGoRJkv01CWcAQShgQeAqkQf9FUzt3VTVSEzVVp2oyGCCKNxOKsX9s5iXSyVG8/:pkUQVcA5f+fHqt3XSq1CbhsX9HhMnnu
Malware Config
Signatures
Files
-
d5c9cce6e1cac73a2f39d20105dccd3808d3bb98a9da304a20cf6cb30052b981.exe windows x86
db68155a42b0de98bb0de2dc0965f853
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAddAccessAllowedObjectAce
kernel32
WritePrivateProfileStringW
IsBadHugeReadPtr
GetCommandLineW
GetUserDefaultLangID
advapi32
CreateProcessWithLogonW
user32
GetShellWindow
Sections
.text Size: 453KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE