Static task
static1
Behavioral task
behavioral1
Sample
b5f8bcfc1df1fa7136bdc93d38f001044a9d5fd726f8e3137e63dd8d0b14dbc6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5f8bcfc1df1fa7136bdc93d38f001044a9d5fd726f8e3137e63dd8d0b14dbc6.exe
Resource
win10v2004-20220812-en
General
-
Target
b5f8bcfc1df1fa7136bdc93d38f001044a9d5fd726f8e3137e63dd8d0b14dbc6
-
Size
183KB
-
MD5
23daa96666f5e2d609d80be25d28ff53
-
SHA1
d85b6fed474fe5d4f3a41844d6eceb59243d5cc1
-
SHA256
b5f8bcfc1df1fa7136bdc93d38f001044a9d5fd726f8e3137e63dd8d0b14dbc6
-
SHA512
992ae8a7310163633813973d441722e36b923e3bdef9124036cb61f852693448dca9fff05cff57ecca774897ed6e563315566de658c08ad8b78a9720eb8d34a2
-
SSDEEP
3072:d27HUJuFj8EmV6YrgrOI3cYLEwtVz76hj4RXm:d2TUJY7AroOI3/TtN7UP
Malware Config
Signatures
Files
-
b5f8bcfc1df1fa7136bdc93d38f001044a9d5fd726f8e3137e63dd8d0b14dbc6.exe windows x86
bcf172ff3b835db5aef517139de6a607
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
GetModuleHandleA
CloseHandle
GetVolumeInformationA
AddAtomA
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
user32
MessageBoxA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 618B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sxvpcwm Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE