Static task
static1
Behavioral task
behavioral1
Sample
5736e2771cfdeb1ff796b4b4dd5c66ac7c791ec0bb912e277b9c1e698ba3c7d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5736e2771cfdeb1ff796b4b4dd5c66ac7c791ec0bb912e277b9c1e698ba3c7d3.exe
Resource
win10v2004-20220901-en
General
-
Target
5736e2771cfdeb1ff796b4b4dd5c66ac7c791ec0bb912e277b9c1e698ba3c7d3
-
Size
49KB
-
MD5
b704ceb0a130bb0d602c12276b28e80e
-
SHA1
0fe8c025fa7899bd8ed67dce340f87583b056dca
-
SHA256
5736e2771cfdeb1ff796b4b4dd5c66ac7c791ec0bb912e277b9c1e698ba3c7d3
-
SHA512
b1bccf2320d05f5b0e643fba3aa6d1f6de9b43c20b2c920aeb06f08670a951beaf440bc8c8b485224eca8b3fb2d52e4fd01a16d5a8eec867bc5d2f94daea7101
-
SSDEEP
768:Fy5a0IXkHOysQZ31SD0dq8EKIU3H8HgzTRWEK0bcT:cm0HPZ31SB8ElUH8HAI06
Malware Config
Signatures
Files
-
5736e2771cfdeb1ff796b4b4dd5c66ac7c791ec0bb912e277b9c1e698ba3c7d3.exe windows x86
c8f9e00d9d03ae918c5938f7266b1bfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitCommEvent
VirtualAlloc
RtlMoveMemory
CreateNamedPipeA
IsProcessorFeaturePresent
WriteFile
DeviceIoControl
IsProcessorFeaturePresent
FormatMessageA
GetLastError
EnumUILanguagesA
OpenEventA
SetCommState
QueryPerformanceCounter
SetVolumeMountPointA
SetEnvironmentVariableA
Heap32First
SetFilePointer
ReadConsoleOutputAttribute
GlobalLock
GetPriorityClass
advapi32
CredUnmarshalCredentialA
CredMarshalCredentialW
dpmodemx
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE