Static task
static1
Behavioral task
behavioral1
Sample
b5544a0b64e5315af4c761a5d09dcc33468e68c8df132180ca6e460bf4be0b38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5544a0b64e5315af4c761a5d09dcc33468e68c8df132180ca6e460bf4be0b38.exe
Resource
win10v2004-20221111-en
General
-
Target
b5544a0b64e5315af4c761a5d09dcc33468e68c8df132180ca6e460bf4be0b38
-
Size
95KB
-
MD5
7e632aa37f807fc880b3ceca44e9ef4d
-
SHA1
2532bd397d4d37a688cf13463cbb938f8d045e5a
-
SHA256
b5544a0b64e5315af4c761a5d09dcc33468e68c8df132180ca6e460bf4be0b38
-
SHA512
e236337d51f8fd1699b5c96650404591b22faf3a6a62714b6e0528a71eb3ce457da9fff6736c57ebc4d85e9ed5d5b958553eb7ed56897d73029453ea4fd05f46
-
SSDEEP
1536:+7R/LUvMRaVOyDxcCBdNq9vHt39fQQ3YRk5bv9TpdjtNSi900lDcLGS2AOj2oF6d:+79LUURaQ9dPvzNSo/CaSej2o8YMDl
Malware Config
Signatures
Files
-
b5544a0b64e5315af4c761a5d09dcc33468e68c8df132180ca6e460bf4be0b38.exe windows x86
8bc52e0de316ac357fb936fdac9e28c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
lstrcmpW
GetTickCount
SetLastError
CreateThread
GetDiskFreeSpaceW
CreateFileA
LoadLibraryA
GetFileAttributesW
LoadLibraryA
FindAtomA
ResetEvent
HeapCreate
GetComputerNameA
ReleaseMutex
GetSystemTime
SetEvent
GetDriveTypeA
GetCommandLineA
CloseHandle
user32
CloseWindow
GetKeyState
GetClipCursor
CallWindowProcA
SetFocus
GetDlgItem
FillRect
GetClassInfoA
DispatchMessageA
DrawStateA
GetComboBoxInfo
DestroyCaret
CreateWindowExA
cryptdll
CDLocateRng
CDBuildVect
MD5Init
CDRegisterRng
MD5Final
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ