Static task
static1
Behavioral task
behavioral1
Sample
5e5881cadbb05ec1fe0e104a038c96d4549e15a5513ad45648fdd4c71aff8b82.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5e5881cadbb05ec1fe0e104a038c96d4549e15a5513ad45648fdd4c71aff8b82.exe
Resource
win10v2004-20221111-en
General
-
Target
5e5881cadbb05ec1fe0e104a038c96d4549e15a5513ad45648fdd4c71aff8b82
-
Size
53KB
-
MD5
fba26c038c3f65b6a0b69e52c1c38263
-
SHA1
46c5d897531c8895c212001693601aadb8ec5695
-
SHA256
5e5881cadbb05ec1fe0e104a038c96d4549e15a5513ad45648fdd4c71aff8b82
-
SHA512
559a347d50c4ae589badfd02757d3bc08a0b1da5c8f5a81399360d2858538e16b8416878501612bf8222ed1650fcb3d9e88aa5a7bf654857b5501778532b3dd9
-
SSDEEP
1536:rRVpEAs+86X82D+DeqKJTXIqS8ppxZl6qsdO2kZ:xEzK8LaqEIeLxOXkZ
Malware Config
Signatures
Files
-
5e5881cadbb05ec1fe0e104a038c96d4549e15a5513ad45648fdd4c71aff8b82.exe windows x86
364afe9e11ed251e77df2d540a70d78c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualProtect
CloseHandle
LocalFree
ReadFile
SetFilePointer
GetVersionExA
LocalAlloc
GetFileSize
CreateFileA
GetProcAddress
VirtualAllocEx
GetCurrentProcess
SetEvent
CreateMutexA
GetModuleHandleA
ExitThread
VirtualAlloc
VirtualFree
GetComputerNameA
CreateEventA
GetModuleFileNameA
CreateSemaphoreA
advapi32
GetUserNameA
user32
ShowWindow
FindWindowA
DestroyWindow
UnhookWinEvent
MessageBoxA
GetDesktopWindow
GetForegroundWindow
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ