Static task
static1
Behavioral task
behavioral1
Sample
5fb3ecfce69db9564edda8123cece33de60f516b86b385fc1c4f636577d84e48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fb3ecfce69db9564edda8123cece33de60f516b86b385fc1c4f636577d84e48.exe
Resource
win10v2004-20220812-en
General
-
Target
5fb3ecfce69db9564edda8123cece33de60f516b86b385fc1c4f636577d84e48
-
Size
284KB
-
MD5
22ac8dd53273fdaef2decdcce19806b5
-
SHA1
2cef187b45506b294f57f830d83dc91642c8800f
-
SHA256
5fb3ecfce69db9564edda8123cece33de60f516b86b385fc1c4f636577d84e48
-
SHA512
dfc306db5dca5dda26b0afcbf2db9c60e11a26ef19908ddefc5af8e89e0710a253de0b6507c87546218479ed5cf6ff53e6a99345f881bcea3cf65810ae0334d1
-
SSDEEP
6144:UL5UGHR3EZetvAfgtLcHVnrZE03bSFoTTNmLT9ztEyfdhE/rj02LpCy3:BGHR0EtvVLW1Eb6R8NtEyfHE/rRFr
Malware Config
Signatures
Files
-
5fb3ecfce69db9564edda8123cece33de60f516b86b385fc1c4f636577d84e48.exe windows x86
fc850653d2b6a505be59a1cc0e97a36d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowRgn
EnumDesktopWindows
IsCharUpperW
SetWindowTextA
ValidateRect
GetActiveWindow
GetThreadDesktop
IsCharAlphaNumericA
SetClassLongA
ole32
CoRevokeClassObject
OleSetClipboard
IIDFromString
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
LoadResource
SizeofResource
GlobalHandle
SetFileAttributesA
FindResourceExW
LocalFree
HeapCreate
GetThreadContext
LoadLibraryA
GetProcAddress
GetStartupInfoA
HeapFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
Sections
.text Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ