Static task
static1
Behavioral task
behavioral1
Sample
a5c3cb27abad586633dbe2ed838b429b14204c53df99a22456556285f38e74aa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5c3cb27abad586633dbe2ed838b429b14204c53df99a22456556285f38e74aa.exe
Resource
win10v2004-20220812-en
General
-
Target
a5c3cb27abad586633dbe2ed838b429b14204c53df99a22456556285f38e74aa
-
Size
94KB
-
MD5
bc245df2f886b439ede0832e4781b5e0
-
SHA1
51780a2cd86d01e9cac80a8db9af558dc33ce6cd
-
SHA256
a5c3cb27abad586633dbe2ed838b429b14204c53df99a22456556285f38e74aa
-
SHA512
d5659aa08443c34761353b789cc2cf9be322190ae4d990dfb69e45c1df379b4730cc3b781962037f64813cc7bc1a7f546bb483e1990598f83f6694008e4b5b4a
-
SSDEEP
1536:eMRQwwV6McsochNvxl6XI/xpoUCisKldV:XeV6TswXI/xpoUfR
Malware Config
Signatures
Files
-
a5c3cb27abad586633dbe2ed838b429b14204c53df99a22456556285f38e74aa.exe windows x86
0de4578dbd7321738cb3dec112cf7b50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetProcAddress
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
LCMapStringW
GetStringTypeA
FreeLibrary
DeleteFileA
GetVersionExA
GetModuleHandleA
LoadLibraryA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW
user32
MessageBoxA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
GetCursorPos
GetWindowRect
GetDC
ReleaseDC
DefWindowProcA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
LoadBitmapA
PostMessageA
GetClientRect
ShowWindow
SendMessageA
GetMessageA
IsWindow
GetKeyboardState
TranslateMessage
DispatchMessageA
gdi32
StretchBlt
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
GetStockObject
GetObjectA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE