Static task
static1
Behavioral task
behavioral1
Sample
b5e6ad46d57eee5fbd6ca0d4570ed3e8db5d343c843462b3deb1cfeb0dcaf7d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5e6ad46d57eee5fbd6ca0d4570ed3e8db5d343c843462b3deb1cfeb0dcaf7d6.exe
Resource
win10v2004-20221111-en
General
-
Target
b5e6ad46d57eee5fbd6ca0d4570ed3e8db5d343c843462b3deb1cfeb0dcaf7d6
-
Size
773KB
-
MD5
34573fdb9b3bee59355d1afd48ecfae0
-
SHA1
0afbceda234eed2768063157d00f057db789ca29
-
SHA256
b5e6ad46d57eee5fbd6ca0d4570ed3e8db5d343c843462b3deb1cfeb0dcaf7d6
-
SHA512
1a09fc4aeb4a6ccc8e765b853d558a10f62061308ac9c8a493cc876c63775a75d608f98492262a0996c32b9b4e3896984a4c02a651ffc433268e8b001222ec16
-
SSDEEP
12288:wF5U4/wADtcEPAES5cdy2oxtGXNEbdFu5R3tIWzt5JKauH4dJrduq6:R0wYHPpScyfvGXNEKRrztmauydu
Malware Config
Signatures
Files
-
b5e6ad46d57eee5fbd6ca0d4570ed3e8db5d343c843462b3deb1cfeb0dcaf7d6.exe windows x86
9fd4ee2b729eb86c67fa3c59e6988af5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CloseHandle
Sleep
SetEvent
GetTimeFormatA
CreateEventA
ReleaseMutex
OpenMutexA
HeapCreate
GetModuleFileNameW
lstrlenW
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
CloseHandle
GetTickCount
ResumeThread
SetConsoleCP
DeleteFileA
HeapDestroy
advapi32
ClearEventLogW
CreateProcessAsUserA
IsValidAcl
RegEnumKeyA
RegDeleteValueA
InitializeSid
CreateServiceW
ControlService
IsValidSecurityDescriptor
RegQueryValueW
RegCreateKeyExW
IsValidSid
IsTextUnicode
msvcirt
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
??0Iostream_init@@QAE@XZ
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ