Static task
static1
Behavioral task
behavioral1
Sample
5b6bf4f43259a61b971adc87fd9fabd75ca21dfc69e406807db2960b2742405d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b6bf4f43259a61b971adc87fd9fabd75ca21dfc69e406807db2960b2742405d.exe
Resource
win10v2004-20221111-en
General
-
Target
5b6bf4f43259a61b971adc87fd9fabd75ca21dfc69e406807db2960b2742405d
-
Size
482KB
-
MD5
2cc89b082c01491954d6d14a88f4b604
-
SHA1
af2c6848f8ebe419a1775a50e6a63ac794ff0343
-
SHA256
5b6bf4f43259a61b971adc87fd9fabd75ca21dfc69e406807db2960b2742405d
-
SHA512
3a0a01158bb8add4c2924dcd73eb96fe0f4eff814bb44d61cb25cb9c9c2ce20d0715eea9bf0f3f34b4ab60d5beff528b25c1e018fb7d4897fe85355d9896f3ac
-
SSDEEP
3072:Bxvyk5cb4FOP05lekJhkeTxObQdcvlhtBCmtQr5obEAX1YWdqRKWZs:BzCPkl5JhvTcb2cvJBPt4AE6F
Malware Config
Signatures
Files
-
5b6bf4f43259a61b971adc87fd9fabd75ca21dfc69e406807db2960b2742405d.exe windows x86
0c1b17895074caa4bce30f8003fbe592
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
GetProcAddress
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStartupInfoA
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bdq7ob2 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE