Static task
static1
Behavioral task
behavioral1
Sample
5a4e03d730ffc4fbd663ada4d13c211a43d675f69af217198d05e5899706e5af.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a4e03d730ffc4fbd663ada4d13c211a43d675f69af217198d05e5899706e5af.exe
Resource
win10v2004-20220901-en
General
-
Target
5a4e03d730ffc4fbd663ada4d13c211a43d675f69af217198d05e5899706e5af
-
Size
84KB
-
MD5
6fbad8b57d5bfb15893b5d0120b40dd0
-
SHA1
edcd548ef262b17075add0fa7fd73ab0ff84c692
-
SHA256
5a4e03d730ffc4fbd663ada4d13c211a43d675f69af217198d05e5899706e5af
-
SHA512
468ff70fe08fbd5679beeadceb6535e45ace5e9ecc20428dc758f30819f42c155c50ba31bd77ff0f5b8aa02d70be92dc5dcd05c739ec74919a12568406070ba1
-
SSDEEP
1536:4YfHsvOP6agG3CVoxM7jyST1qcAcGoUv3Bo:4YfH5F8jT1qcAqmBo
Malware Config
Signatures
Files
-
5a4e03d730ffc4fbd663ada4d13c211a43d675f69af217198d05e5899706e5af.exe windows x86
d1030f0d575b1564d51ff9cb6c6dd8d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetModuleHandleW
GetCommandLineW
TlsGetValue
GetCommandLineA
LoadLibraryA
SetErrorMode
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
CreateFileW
ExitProcess
WriteFile
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
HeapAlloc
GetOEMCP
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetACP
user32
RegisterClassExA
GetClientRect
GetSystemMetrics
gdi32
Rectangle
advapi32
RegCreateKeyExA
RegCloseKey
ole32
CoTaskMemAlloc
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ