Static task
static1
Behavioral task
behavioral1
Sample
a5b2e01ba2ea3ea741f04d134c05d852711f4a6120213e83ec6ed7b4b3a639d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5b2e01ba2ea3ea741f04d134c05d852711f4a6120213e83ec6ed7b4b3a639d5.exe
Resource
win10v2004-20221111-en
General
-
Target
a5b2e01ba2ea3ea741f04d134c05d852711f4a6120213e83ec6ed7b4b3a639d5
-
Size
863KB
-
MD5
ef326b43da01df1e41b858b00533c4ae
-
SHA1
0094fed31fd99c1addc8f5f0102286f1f203fa32
-
SHA256
a5b2e01ba2ea3ea741f04d134c05d852711f4a6120213e83ec6ed7b4b3a639d5
-
SHA512
cbfdb6d2364308b8b7bc17bcbfafc1951cd9bd1b388eeeefe10cbedde64f920e04b03ed3e702b6a482efe12764b9312fdffa90d06ea2f5cb21c52dc88b2c7efd
-
SSDEEP
12288:RWNi/I1t3k7jOXOKcWWRZKVlBvV83tY6yEdGPwlb9rDnRJbXHYEMPUMYG0U:RWNi/a0joXc9QV8gUGgbPJ8e
Malware Config
Signatures
Files
-
a5b2e01ba2ea3ea741f04d134c05d852711f4a6120213e83ec6ed7b4b3a639d5.exe windows x86
e9f85042ee76af7e9fbdff58487b969a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
LocalFree
SuspendThread
HeapCreate
GetPrivateProfileStringW
CreateMailslotA
GetProcessTimes
GetModuleHandleA
SetLastError
GetDriveTypeW
GlobalFree
ReadFile
EnumCalendarInfoW
GetCurrentThreadId
FindClose
ResetEvent
GetModuleFileNameA
FindAtomA
EnterCriticalSection
GetFileAttributesA
user32
GetWindowLongA
CallWindowProcW
GetKeyboardType
GetClassInfoA
IsWindow
GetWindowInfo
SetFocus
DispatchMessageA
DrawTextW
GetSysColor
DispatchMessageA
GetKeyState
GetClientRect
cliconfg
OnInitDialogMain
OnInitDialogMain
OnInitDialogMain
OnInitDialogMain
OnInitDialogMain
desk.cpl
DeskSetCurrentScheme
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 853KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbtcgbn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE