Static task
static1
Behavioral task
behavioral1
Sample
b5835dc58e76d539a956ac03b68e55df524b6915b9e0797da677149b151a1715.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5835dc58e76d539a956ac03b68e55df524b6915b9e0797da677149b151a1715.exe
Resource
win10v2004-20221111-en
General
-
Target
b5835dc58e76d539a956ac03b68e55df524b6915b9e0797da677149b151a1715
-
Size
121KB
-
MD5
d5c01f50727c1d7228d1b4e0cd95810a
-
SHA1
cef6dec4ac26e6d2aa4e0c2e8bd43723c0cd5cb7
-
SHA256
b5835dc58e76d539a956ac03b68e55df524b6915b9e0797da677149b151a1715
-
SHA512
223482bd058b3c6cf54d3673b2603d8d61f38bf911a3cc22b98375df64be5d57830e9a684e28582816a10e9de07956e8d32e6e109d83503c2b0352805c177a5e
-
SSDEEP
1536:5dffSAj4cUIMNIeheiZmouzx68CFkISgMOemVokex6K9luzvtaT:nffBtdeheiFuzM3FkISvOemaTk
Malware Config
Signatures
Files
-
b5835dc58e76d539a956ac03b68e55df524b6915b9e0797da677149b151a1715.exe windows x86
22a607ed502d249b2ee964ea15f08802
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
CreateFileA
HeapCreate
CloseHandle
DeleteFileW
GetStdHandle
ReadFile
GetStartupInfoA
GetEnvironmentVariableA
MapViewOfFile
GetPriorityClass
FindAtomA
TlsGetValue
GetFileAttributesA
HeapDestroy
DeleteAtom
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
IsBadCodePtr
user32
GetSysColor
CallWindowProcW
FindWindowA
GetWindowInfo
GetClassInfoA
IsZoomed
DrawTextW
DispatchMessageA
GetWindowLongA
GetKeyState
DestroyMenu
SetFocus
DispatchMessageA
DestroyMenu
ntlanman
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ