Static task
static1
Behavioral task
behavioral1
Sample
5f5eacc7662edc71d2d5b090a1aa03c52c760c7d81053548805806e9dc2d3ad9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5f5eacc7662edc71d2d5b090a1aa03c52c760c7d81053548805806e9dc2d3ad9.exe
Resource
win10v2004-20220812-en
General
-
Target
5f5eacc7662edc71d2d5b090a1aa03c52c760c7d81053548805806e9dc2d3ad9
-
Size
811KB
-
MD5
fd377fc2e02c9e05298d44b30070299f
-
SHA1
bb175779e0fc5d58fb9b35308b1b8e53e21fc2b7
-
SHA256
5f5eacc7662edc71d2d5b090a1aa03c52c760c7d81053548805806e9dc2d3ad9
-
SHA512
ae24718858bcc68819060463fd28309f9d472c3a35b6651b01e06f80ff6b9fbd39486fd622825a281125a6450eade1962bf026572c6d2431881b71d0205d51c4
-
SSDEEP
24576:CQ8gq3/weYuy7nUipxEh/2EZNUlXtkMHPp:CQ03tYuyrxghZAtrHP
Malware Config
Signatures
Files
-
5f5eacc7662edc71d2d5b090a1aa03c52c760c7d81053548805806e9dc2d3ad9.exe windows x86
cbdaa8390e4845ce1c9fb61917ae8a59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
TlsGetValue
GetCalendarInfoW
Sleep
EnterCriticalSection
GetStartupInfoA
RemoveDirectoryA
LeaveCriticalSection
VirtualProtectEx
GetFileTime
GetModuleHandleA
CreateFileA
FindClose
GetCurrentThreadId
CloseHandle
CreateDirectoryA
GetModuleFileNameA
LocalLock
InitializeCriticalSection
WriteConsoleW
GetConsoleMode
GlobalFree
DeleteFileA
GetLocalTime
GetProcessHeap
user32
GetKeyState
MessageBoxA
FillRect
GetWindowLongA
wsprintfA
PeekMessageA
GetWindowDC
DispatchMessageA
EqualRect
IsWindowVisible
GetWindowLongA
IsWindowEnabled
GetSysColor
cryptnet
LdapProvOpenStore
CertDllVerifyCTLUsage
CryptGetObjectUrl
CryptGetTimeValidObject
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE