Static task
static1
Behavioral task
behavioral1
Sample
c5b8f69ffaa5cdf3bf93845ea468742e51a83139226055087930d92220ee83d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5b8f69ffaa5cdf3bf93845ea468742e51a83139226055087930d92220ee83d7.exe
Resource
win10v2004-20221111-en
General
-
Target
c5b8f69ffaa5cdf3bf93845ea468742e51a83139226055087930d92220ee83d7
-
Size
201KB
-
MD5
b1a590302ffa58d23ac7f3a675e07186
-
SHA1
17419becf85101cfee45d756d5353f9854fe494f
-
SHA256
c5b8f69ffaa5cdf3bf93845ea468742e51a83139226055087930d92220ee83d7
-
SHA512
95823f63c37c7a2779df493603e1fbc0ced9a52704f27cb24e9e43a05cafa24c993a90147632014138d7c2827aa62f427177cf5d0fe85e04e76b8f73b7168cbb
-
SSDEEP
6144:DFOmnKGa5Jdqt8Ip9mGCuQRmzb3Hpll0PRVqAd0:DF7TAqEG0mX3Z8X0
Malware Config
Signatures
Files
-
c5b8f69ffaa5cdf3bf93845ea468742e51a83139226055087930d92220ee83d7.exe windows x86
c6dffab7b1dd98413d1233ea649d1aa1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetUserDefaultLCID
Sleep
CloseHandle
GetModuleHandleW
GetLastError
CreateFileMappingW
LoadLibraryA
LocalAlloc
FoldStringW
GetAtomNameW
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsGetValue
GetProcAddress
GetModuleHandleW
shell32
SHLimitInputEdit
SHGetFolderPathW
advapi32
RegQueryValueExA
RegSetValueExA
LsaLookupNames
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ