Static task
static1
Behavioral task
behavioral1
Sample
ba5d276a251fecd312ede84044b806fc82a1e670c80cbdaf45b8841c21eed55d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba5d276a251fecd312ede84044b806fc82a1e670c80cbdaf45b8841c21eed55d.exe
Resource
win10v2004-20220812-en
General
-
Target
ba5d276a251fecd312ede84044b806fc82a1e670c80cbdaf45b8841c21eed55d
-
Size
308KB
-
MD5
1c38c5b5533c6b91c8291ebd09375dd0
-
SHA1
13bbe69ca59a2efe85ba127528cac5796f5f8a02
-
SHA256
ba5d276a251fecd312ede84044b806fc82a1e670c80cbdaf45b8841c21eed55d
-
SHA512
c033e7f68a043b8f42248ca75d35a9b918e33e500d8c118663e0b272e166e29a13004d8f9bf6556c668f6530a38a10a807ce5b0062e41994bc6820f117354350
-
SSDEEP
6144:/fge2isVK4RIEspA9UNDpkmSALRISbRuJTojTNVEHMLvZ:/b2rkKRkA9UNumrm6uJTK8M7
Malware Config
Signatures
Files
-
ba5d276a251fecd312ede84044b806fc82a1e670c80cbdaf45b8841c21eed55d.exe windows x86
6073917597d39b01c3e49e2e846d1a10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageW
SetFileTime
lstrcatA
GetExitCodeProcess
IsBadWritePtr
lstrcpyA
GetFileSize
InitializeCriticalSection
ReadFile
CloseHandle
CreateMutexW
HeapCreate
GetStartupInfoW
GetModuleHandleA
GetLastError
FindResourceW
SetFileTime
SetFileTime
LoadLibraryA
LeaveCriticalSection
CreatePipe
mstscax
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
user32
PostMessageW
DispatchMessageA
MessageBoxA
IsDialogMessageA
IsWindow
wsprintfA
GetWindowRect
GetWindowLongW
PeekMessageW
GetWindowTextA
PostMessageA
LoadCursorW
SetFocus
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE