Static task
static1
Behavioral task
behavioral1
Sample
f5c7e60e412ba006516e77dd2733941d6ce2658ba366358d708d54ce8162f60f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5c7e60e412ba006516e77dd2733941d6ce2658ba366358d708d54ce8162f60f.exe
Resource
win10v2004-20221111-en
General
-
Target
f5c7e60e412ba006516e77dd2733941d6ce2658ba366358d708d54ce8162f60f
-
Size
86KB
-
MD5
069c724f281167c701ba14a774557e10
-
SHA1
4b8ffb1f6aa9e4b3f06facf25024f74222b5240e
-
SHA256
f5c7e60e412ba006516e77dd2733941d6ce2658ba366358d708d54ce8162f60f
-
SHA512
c74e1a4c2693a5e4a55846646304ec6660d916db6a2599f91999c3dfd4fb396c6e6dcac1180d66e16f5167e22a38337e399d43678d96bd7dc350d04a44eb33de
-
SSDEEP
1536:ptwAH8WuMHfx5ser+mu7ITKaEwpwQNyJgS87Fnp4EjS13gQeyllw57XdN95G2Jii:ptfH8WuMHbR47aSweUyWOyQDlaJ8MiLO
Malware Config
Signatures
Files
-
f5c7e60e412ba006516e77dd2733941d6ce2658ba366358d708d54ce8162f60f.exe windows x86
871a42c251954399e8b9dab310e13d0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
QueryPerformanceCounter
GetModuleHandleW
VirtualFree
QueryPerformanceCounter
LocalAlloc
GetModuleHandleA
GetCurrentProcess
GetCommandLineW
GetACP
GlobalAlloc
GetModuleFileNameA
MultiByteToWideChar
GetModuleHandleW
user32
InvalidateRect
SetTimer
CreateWindowExW
GetMessageW
ReleaseDC
gdi32
SetBkMode
CreateCompatibleDC
SetBkColor
CreateCompatibleBitmap
SetBkColor
GetStockObject
MoveToEx
SelectObject
GetObjectW
GetStockObject
GetDeviceCaps
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ