Static task
static1
Behavioral task
behavioral1
Sample
b5fe94b702d91092877d318c06360b30bf79c358084c147e35f1e9b600366108.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5fe94b702d91092877d318c06360b30bf79c358084c147e35f1e9b600366108.exe
Resource
win10v2004-20221111-en
General
-
Target
b5fe94b702d91092877d318c06360b30bf79c358084c147e35f1e9b600366108
-
Size
1.1MB
-
MD5
04ef1a5221582bff4662d3350653cbe8
-
SHA1
1bcf594b641926a22203e628c58d59f13a3b49be
-
SHA256
b5fe94b702d91092877d318c06360b30bf79c358084c147e35f1e9b600366108
-
SHA512
4cf4619787541046943c2c84d25ececbe1fa831707e1cbcec6c4c3acb566586d057ec62f9ecb417b0b1e9f18eee736ca8ad8c94ce217401b353f317788554a14
-
SSDEEP
24576:RgvVxxt54tsZ327hmozYpnnN+TO8STBEfXEiJXVc:avVfktk30moMpnnNAATePEiJXVc
Malware Config
Signatures
Files
-
b5fe94b702d91092877d318c06360b30bf79c358084c147e35f1e9b600366108.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 23KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xslcooot Size: 995KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bfifyxiu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE