Static task
static1
Behavioral task
behavioral1
Sample
5251ab8e2d7231f8ef3e363663f1f8ccbcdb253d7740be5ce52eadb0a69f1793.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5251ab8e2d7231f8ef3e363663f1f8ccbcdb253d7740be5ce52eadb0a69f1793.exe
Resource
win10v2004-20221111-en
General
-
Target
5251ab8e2d7231f8ef3e363663f1f8ccbcdb253d7740be5ce52eadb0a69f1793
-
Size
8.5MB
-
MD5
7e38e46e75dafd20e702a0323a311622
-
SHA1
a6bd6ff7104fa2bad256c43b08aeb0bc349bf16b
-
SHA256
5251ab8e2d7231f8ef3e363663f1f8ccbcdb253d7740be5ce52eadb0a69f1793
-
SHA512
d03c705fdddc0700db26dba4f1eeb2e81295b0ff041ede4655b26b1196e7bb65a6d588d6072b4dda521cff9ea28c5a162cc78fce5ce752f11884b027f4b85d12
-
SSDEEP
196608:y1qmZP1PaUh8xDK+796wv96RZAdwGAuIk9PxN7Fiul/te2QbiP2UXTdA:y1qIaHLQc96ReeRAPViU/tcbS2UDq
Malware Config
Signatures
Files
-
5251ab8e2d7231f8ef3e363663f1f8ccbcdb253d7740be5ce52eadb0a69f1793.exe windows x86
b68377fa03001c6f3c4f9ac55f3e64e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDefaultCommConfigA
MoveFileExA
SetUserGeoID
VerSetConditionMask
GlobalAddAtomA
FindNextVolumeMountPointA
GetLocaleInfoA
IsBadStringPtrA
WriteProfileSectionA
VirtualAlloc
SetLocaleInfoA
GetNumberOfConsoleMouseButtons
CreateNamedPipeA
GetWindowsDirectoryA
GetSystemWindowsDirectoryA
IsProcessorFeaturePresent
IsProcessorFeaturePresent
GlobalMemoryStatus
WaitCommEvent
SetHandleContext
ReadConsoleOutputCharacterA
dpnet
DirectPlay8Create
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 419KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 495KB - Virtual size: 833KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 350KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ