Static task
static1
Behavioral task
behavioral1
Sample
5bd35d49fcf8ab2b7d85f10a6c932ac8e5471dd0404ee042c3a11dc17f3a081d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bd35d49fcf8ab2b7d85f10a6c932ac8e5471dd0404ee042c3a11dc17f3a081d.exe
Resource
win10v2004-20221111-en
General
-
Target
5bd35d49fcf8ab2b7d85f10a6c932ac8e5471dd0404ee042c3a11dc17f3a081d
-
Size
304KB
-
MD5
12a8d52eb022dbbb1e77ca86b4b3c460
-
SHA1
c82488f8c46024207d6e5634dd6aa3a166a99cd0
-
SHA256
5bd35d49fcf8ab2b7d85f10a6c932ac8e5471dd0404ee042c3a11dc17f3a081d
-
SHA512
a01b3898a16c196402fb03ef1b49271043a67dcf5e716ab6bffcfcfc432dcd6ac4c39d8caa0a36b04a7ea96c88f80a80919c5c38530d8ece4935ba94808dfb27
-
SSDEEP
6144:ZX+qqNtZP4HQLOK5GoqgvO92BwXXyiWoWymv:hf+flqK4vgvO92BTuza
Malware Config
Signatures
Files
-
5bd35d49fcf8ab2b7d85f10a6c932ac8e5471dd0404ee042c3a11dc17f3a081d.exe windows x86
9e069fc3214fd446248d734336bcc751
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetConsoleTitleA
Heap32Next
CreateMailslotW
DeleteFileA
GetShortPathNameW
HeapFree
DeleteFileA
CreateFileMappingW
SetCurrentDirectoryA
GetModuleHandleA
DeleteFileA
GetStringTypeW
GetModuleHandleW
GetStringTypeW
SetEnvironmentVariableA
GetExitCodeProcess
GetProcessHeap
GetACP
WriteConsoleW
SetFilePointer
GetVersion
GetConsoleAliasW
mstscax
DllGetTscCtlVer
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ