Static task
static1
Behavioral task
behavioral1
Sample
5994354ad5c58d93b5feea2abcb408975a356976015f16a78481339c6984b69f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5994354ad5c58d93b5feea2abcb408975a356976015f16a78481339c6984b69f.exe
Resource
win10v2004-20220812-en
General
-
Target
5994354ad5c58d93b5feea2abcb408975a356976015f16a78481339c6984b69f
-
Size
307KB
-
MD5
e5cc8b3ccd9f9c738c82f16ed17e0f9d
-
SHA1
67a413ee320465c846bc27120c1537f8d305b998
-
SHA256
5994354ad5c58d93b5feea2abcb408975a356976015f16a78481339c6984b69f
-
SHA512
99619244fdd69c3e5e19ce97253ec62a91794672da7155be032e8cb2f5a5bd4af9587416bd01ce60ce7fad0b906a85b232f4620468caed77c324294ebbc09edc
-
SSDEEP
6144:7PRdhyEyjNu+WbkPbmr9TVOF+f6WbQfk+U44QSEn31U:7pfd+WbkPmVOEfH0dWQDn
Malware Config
Signatures
Files
-
5994354ad5c58d93b5feea2abcb408975a356976015f16a78481339c6984b69f.exe windows x86
1d3bf082a7dc612c5530e1886ab3f543
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CloseHandle
CreateFileA
ReleaseMutex
GetCommandLineW
GetDiskFreeSpaceW
SetEvent
CreateThread
lstrcmpW
HeapCreate
GetModuleHandleA
GetTickCount
GetFileAttributesW
GetComputerNameA
ResetEvent
GetSystemTime
GetDriveTypeA
LoadLibraryW
LocalFree
FindAtomW
user32
SetFocus
GetDlgItem
DrawStateA
CallWindowProcA
DestroyCaret
CloseWindow
GetKeyState
CreateWindowExA
GetClassInfoA
FillRect
GetClipCursor
GetComboBoxInfo
DispatchMessageA
MessageBoxA
cryptdlg
DecodeRecipientID
CertTrustFinalPolicy
CertTrustCertPolicy
CertConfigureTrustA
CertTrustInit
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ