?TravelCheck@@YGK:O
Static task
static1
Behavioral task
behavioral1
Sample
b5a52d29905815d20ea52b21d083108018e6d513574aafa74a227c6187d5cb90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5a52d29905815d20ea52b21d083108018e6d513574aafa74a227c6187d5cb90.exe
Resource
win10v2004-20220812-en
General
-
Target
b5a52d29905815d20ea52b21d083108018e6d513574aafa74a227c6187d5cb90
-
Size
186KB
-
MD5
83dc20a6f1c4170f083645acc40aba9a
-
SHA1
b48f1d8bca02d31121973038dc07d020660ad182
-
SHA256
b5a52d29905815d20ea52b21d083108018e6d513574aafa74a227c6187d5cb90
-
SHA512
63b491871afeec63924d961eea557bfa344f64388d1bb1c6179278a07f6b71b1b5806b3317929a573fac6bb5366aaaad00eee4bff2aceb06091fe376858f9f22
-
SSDEEP
3072:i1t5jV0GP0vJ1uD8j6LqNPWWTBp1YsS+NSfXPc8/5/uVM:yTL0RELqZWW9vhxsPfNuV
Malware Config
Signatures
Files
-
b5a52d29905815d20ea52b21d083108018e6d513574aafa74a227c6187d5cb90.exe windows x86
33a393f20d7a04c02c8046328d15a68c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
floor
fgets
__p__commode
memset
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
vswprintf
_cexit
__setusermatherr
__getmainargs
shlwapi
UrlGetLocationA
UrlIsOpaqueW
kernel32
CreateEventW
lstrlenA
GetStringTypeExW
LoadResource
FindNextFileW
GlobalFlags
GetModuleHandleA
lstrcmpiW
lstrcpyA
FindResourceA
GetModuleFileNameA
SetHandleCount
user32
IsCharAlphaA
GetDC
GetSystemMenu
ShowScrollBar
EnumChildWindows
GetShellWindow
DrawAnimatedRects
SendMessageW
wsprintfW
Exports
Exports
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ