Static task
static1
Behavioral task
behavioral1
Sample
a51e1d81412942586384e6b156045c096cfcf14e0b0848f71f60135c16ec61bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a51e1d81412942586384e6b156045c096cfcf14e0b0848f71f60135c16ec61bc.exe
Resource
win10v2004-20220901-en
General
-
Target
a51e1d81412942586384e6b156045c096cfcf14e0b0848f71f60135c16ec61bc
-
Size
372KB
-
MD5
53dc408c25797e03280429d20223dbe9
-
SHA1
84813b0c0377f944f8ff2070976772f5887b4b5c
-
SHA256
a51e1d81412942586384e6b156045c096cfcf14e0b0848f71f60135c16ec61bc
-
SHA512
04efe19efb5dea41853d571ab81f7a76b56cf87e638ec184f1e1cc0d3ec57dd8463449fb61e3fcf4b61035c9e0e824000b60f6417f94fb0cad7a2e6c2f7318fd
-
SSDEEP
6144:5JGT4UsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXhzpJP/yDfMvCecDjd7mN:LGcZ6GMWTHnnzn1rrQ5tTIJp7mf
Malware Config
Signatures
Files
-
a51e1d81412942586384e6b156045c096cfcf14e0b0848f71f60135c16ec61bc.exe windows x86
aaf8e5d43c4ac94a365ab387c42ca2a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FindVolumeClose
CloseHandle
VirtualAlloc
ResumeThread
GetDriveTypeW
WriteFile
FreeConsole
GetEnvironmentVariableA
InterlockedExchange
LocalSize
ResetEvent
GetExitCodeProcess
LocalFree
CreateThread
GetMailslotInfo
GetModuleHandleW
GetACP
GetPrivateProfileIntW
GlobalFree
user32
EndDialog
GetClientRect
CreateWindowExA
DrawStateW
DispatchMessageA
GetSysColor
GetClassInfoA
IsWindow
CallWindowProcW
SetFocus
GetCursorInfo
GetSysColor
GetKeyboardType
mstime
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ