Static task
static1
Behavioral task
behavioral1
Sample
5b485bdcf7335994ff54b8f05667890bbd8f20b1ab170a16940be571ce423f24.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b485bdcf7335994ff54b8f05667890bbd8f20b1ab170a16940be571ce423f24.exe
Resource
win10v2004-20221111-en
General
-
Target
5b485bdcf7335994ff54b8f05667890bbd8f20b1ab170a16940be571ce423f24
-
Size
856KB
-
MD5
03dc57552d3b5f29b45ce1566c62f45d
-
SHA1
0b2847395e305eeecf210682e24f50100169092f
-
SHA256
5b485bdcf7335994ff54b8f05667890bbd8f20b1ab170a16940be571ce423f24
-
SHA512
22b0fc81fbb760712581333ea69052230a20e81e0359122fd6b2b8db1ce3d3b8793355491841526f965947c1023b4a6be37a6c17a942145790488e4a00d4397d
-
SSDEEP
24576:H2istJ+H5d7fxBXrMerswakAzmldVR9yfM4vrczxPB:H2Hf+Zd9BVAwKaxOvrcP
Malware Config
Signatures
Files
-
5b485bdcf7335994ff54b8f05667890bbd8f20b1ab170a16940be571ce423f24.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nnhmbpjt Size: 797KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrlymhgh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE