Static task
static1
Behavioral task
behavioral1
Sample
5a076838b16fe83082deb0d63bc747ebba24a36175ee4e4695cf91ecfd9ca4f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a076838b16fe83082deb0d63bc747ebba24a36175ee4e4695cf91ecfd9ca4f6.exe
Resource
win10v2004-20220901-en
General
-
Target
5a076838b16fe83082deb0d63bc747ebba24a36175ee4e4695cf91ecfd9ca4f6
-
Size
811KB
-
MD5
7152004320b9483908db2186d767273e
-
SHA1
e4321f304eb377a22e739d17580c2012de27808f
-
SHA256
5a076838b16fe83082deb0d63bc747ebba24a36175ee4e4695cf91ecfd9ca4f6
-
SHA512
a52a2309787703023dcf00292fb34c76c987d8bf88f98be5195bf10e97a8c3826c20f6abcf926f18078017f6d86a775aecbc7b44f43bb8093f6789257a86aeb8
-
SSDEEP
12288:Qvq/bg9kt+Q6rW7iAf0j4njri64W9UdCLvEHcmxLuwNXujtoSXv/NXIewVphNhj:+2bg2tZiD8jmdCLvEfbctLv/xwVpL
Malware Config
Signatures
Files
-
5a076838b16fe83082deb0d63bc747ebba24a36175ee4e4695cf91ecfd9ca4f6.exe windows x86
5dafa6ff3763d0ada65163e63e763258
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
GetModuleFileNameA
GetStartupInfoA
GetConsoleMode
GlobalFree
VirtualProtectEx
GetLocalTime
GetCommandLineW
LeaveCriticalSection
GetCalendarInfoW
InitializeCriticalSection
GetModuleHandleA
Sleep
CreateDirectoryW
CreateFileA
GetFileTime
EnterCriticalSection
CloseHandle
LocalLock
GetDriveTypeA
RemoveDirectoryA
DeleteFileA
TlsGetValue
FindClose
GetCurrentThreadId
user32
EqualRect
IsWindowVisible
FillRect
IsWindowEnabled
GetWindowDC
wsprintfA
MessageBoxA
GetSysColor
GetWindowLongA
PeekMessageA
GetWindowLongA
DispatchMessageA
IsWindow
cryptdlg
CertConfigureTrustW
CertConfigureTrustA
CertTrustCertPolicy
CertTrustCleanup
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE