Static task
static1
Behavioral task
behavioral1
Sample
a5be6618d518dd62ae0b9ee9d40ded4dbdc5aaa2ab8871e49d63d1fddeced6e7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5be6618d518dd62ae0b9ee9d40ded4dbdc5aaa2ab8871e49d63d1fddeced6e7.exe
Resource
win10v2004-20221111-en
General
-
Target
a5be6618d518dd62ae0b9ee9d40ded4dbdc5aaa2ab8871e49d63d1fddeced6e7
-
Size
304KB
-
MD5
8ed5da32ac928d0a6448475a61d31f24
-
SHA1
c526f67ceacf8460da80bd7b870ca7a79d306e0c
-
SHA256
a5be6618d518dd62ae0b9ee9d40ded4dbdc5aaa2ab8871e49d63d1fddeced6e7
-
SHA512
8c24b1f1585c531544dc1524794189495b1d0eabad3457ce5491f9184f896ac65c190dae580a1b113746dc5b76139ecce850d3da543db6d5435082cca3316957
-
SSDEEP
6144:1e9IYrqmuti1EJ4oGNZFGFxp1OeO//AynRjuYMNPxfuLo9RN:U7REKJdGFxir/nRjuYUxoyN
Malware Config
Signatures
Files
-
a5be6618d518dd62ae0b9ee9d40ded4dbdc5aaa2ab8871e49d63d1fddeced6e7.exe windows x86
1e72ce7ed20f3a286622fce46d0b9b65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CreateFileA
Sleep
GetTickCount
CloseHandle
SetLastError
HeapCreate
GetEnvironmentVariableA
WaitForMultipleObjects
GetProfileIntA
WaitForSingleObject
GetModuleHandleA
HeapSize
GetCurrentDirectoryA
RemoveDirectoryW
GetTickCount
GetStartupInfoW
GetStdHandle
GetFileAttributesW
ReleaseMutex
CreateMutexW
DeleteFileA
GetFileSize
GetLocalTime
ExitProcess
user32
GetDC
GetSysColor
GetDC
DispatchMessageW
GetCursorPos
CallWindowProcW
GetClassInfoA
PeekMessageA
MessageBoxA
DispatchMessageW
GetWindowLongA
GetDC
GetDC
ctl3d32
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ