Static task
static1
Behavioral task
behavioral1
Sample
5f6c1617bc7251d33db612fa5f984d2710b31b3acfcd440f9a0c9c813466bd0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f6c1617bc7251d33db612fa5f984d2710b31b3acfcd440f9a0c9c813466bd0d.exe
Resource
win10v2004-20220812-en
General
-
Target
5f6c1617bc7251d33db612fa5f984d2710b31b3acfcd440f9a0c9c813466bd0d
-
Size
879KB
-
MD5
0e04eadb25b7c2d07ca7a1e7c452407a
-
SHA1
577260aadf8b57f122f8df42fe2428ea82ffd0bd
-
SHA256
5f6c1617bc7251d33db612fa5f984d2710b31b3acfcd440f9a0c9c813466bd0d
-
SHA512
7c6546e6fb47776a6b3ceb59b41c92bdc5f92d9d9198be556f5e5f10a2c1f0e4e5fb5db3964a365f5f1e5c6cd88558dc84bd494dce30a595d8ac21d6c7956fab
-
SSDEEP
12288:/4pehc7YjXpstASJtOAwN9L+RQnPLfDaNyCpa/pND+dplYBGNhcvGP1Nf:/4p65stPtORN9y0LfDagCUnbpGP7
Malware Config
Signatures
Files
-
5f6c1617bc7251d33db612fa5f984d2710b31b3acfcd440f9a0c9c813466bd0d.exe windows x86
2b926fcdef3c5d82d584793add80a7e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
DeleteFileA
GetModuleFileNameW
GetDriveTypeW
LocalFlags
lstrlenA
GetModuleHandleA
HeapCreate
CloseHandle
GetCommandLineA
FindClose
CreateFileMappingW
GetConsoleTitleA
GetStartupInfoA
GetFileTime
IsDebuggerPresent
LocalSize
CloseHandle
Sleep
CreateFileW
user32
LoadImageA
IsZoomed
CallWindowProcW
DispatchMessageA
DestroyWindow
DrawTextW
GetIconInfo
DestroyMenu
DispatchMessageA
IsWindow
GetWindowLongW
PeekMessageA
BeginPaint
dpwsockx
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
DPWS_GetEnumPort
imagehlp
ImageUnload
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ