Static task
static1
Behavioral task
behavioral1
Sample
5ea54e98b5b74b5df1837a0e253c8e806bb3b096c676fe9dd1ccaad3cc98571d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ea54e98b5b74b5df1837a0e253c8e806bb3b096c676fe9dd1ccaad3cc98571d.exe
Resource
win10v2004-20220812-en
General
-
Target
5ea54e98b5b74b5df1837a0e253c8e806bb3b096c676fe9dd1ccaad3cc98571d
-
Size
386KB
-
MD5
24632bf7bae6f1401cef7cf9cd3cc1b0
-
SHA1
3e6e6f935e8dc19164527e1a306f6ce11cbda8f1
-
SHA256
5ea54e98b5b74b5df1837a0e253c8e806bb3b096c676fe9dd1ccaad3cc98571d
-
SHA512
3a4386daf3bd57e4e68f770b404861ec7621757a8e458839e8d75e8c7dc0c2653221e7deaa3d2562896f44ea05d30d5b57fe30eb7b02074c540ccb36f628c89c
-
SSDEEP
12288:DGZwHa9ilQNKBVPyobSgXnUwBLW8IJ1J:6ZwHKNK7yobSgXd61
Malware Config
Signatures
Files
-
5ea54e98b5b74b5df1837a0e253c8e806bb3b096c676fe9dd1ccaad3cc98571d.exe windows x86
049a6c0d79529b5c2904184752755f91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
lstrcmpiA
GetLogicalDrives
ReadFile
GetTickCount
GetExitCodeProcess
GetPrivateProfileStringA
GetConsoleTitleW
GetLastError
GetModuleHandleA
GetBinaryTypeA
GetLocalTime
GetStdHandle
CreateNamedPipeA
TlsAlloc
SetPriorityClass
SetLastError
CreateWaitableTimerA
EndUpdateResourceA
HeapCreate
SetStdHandle
lstrcatW
IsValidCodePage
netshell
NcFreeNetconProperties
HrGetIconFromMediaType
HrLaunchConnection
DllGetClassObject
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 381KB - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpcx Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ