Static task
static1
Behavioral task
behavioral1
Sample
c5b6de5d9b01a2d971837554dc44366264b518b364a75254e9d9370304fe05d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5b6de5d9b01a2d971837554dc44366264b518b364a75254e9d9370304fe05d6.exe
Resource
win10v2004-20220812-en
General
-
Target
c5b6de5d9b01a2d971837554dc44366264b518b364a75254e9d9370304fe05d6
-
Size
819KB
-
MD5
db19caf62162079eb0de762650f3febc
-
SHA1
4f29e24e3ca264c42b0186e6882df1804212f21a
-
SHA256
c5b6de5d9b01a2d971837554dc44366264b518b364a75254e9d9370304fe05d6
-
SHA512
73a28d9bd70908714456e766c391eec80c7e738866d8258fd9f69e7fc5e824a817db6d8e663fe91e6cedaf4be0da7184f7cce57be2da8f03f2ae036d79fb8aa8
-
SSDEEP
12288:skOeErVsAxZ3p9WWTVQcll29VBkzTNZXLGTN03dHLKbmhOp:VOecVrTVP30kN5ZrO
Malware Config
Signatures
Files
-
c5b6de5d9b01a2d971837554dc44366264b518b364a75254e9d9370304fe05d6.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
ETEWQT Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SDG Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gdgg Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdggd Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sgdg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rggg Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 702KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE