Static task
static1
Behavioral task
behavioral1
Sample
c5b0bb5eadce27d452dd77fd9b2439c276b68f1dda8f4baef2cb30fe2c0abd7e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5b0bb5eadce27d452dd77fd9b2439c276b68f1dda8f4baef2cb30fe2c0abd7e.exe
Resource
win10v2004-20220812-en
General
-
Target
c5b0bb5eadce27d452dd77fd9b2439c276b68f1dda8f4baef2cb30fe2c0abd7e
-
Size
80KB
-
MD5
180860e4c62f5c66de9424849255284d
-
SHA1
4a7649361db7f4135467da6978f7fe348971a2ed
-
SHA256
c5b0bb5eadce27d452dd77fd9b2439c276b68f1dda8f4baef2cb30fe2c0abd7e
-
SHA512
86763e4f82ac38077c5c864f308a0f22c9020b55f403b9e9ac0d4389e9a562544ddf43401543a8553259c022ce608353a1f50d053e4fe4c4a25f06a933d69639
-
SSDEEP
768:/j1bMZ4HCgRQykqpB6xnHh8Yz4rQDsPGt5YjPksfitNBZl+BcSJEmbbLFTzHcZYg:/j9CgDkaB6xnB5zC5krLP+hvJ4aQrQzG
Malware Config
Signatures
Files
-
c5b0bb5eadce27d452dd77fd9b2439c276b68f1dda8f4baef2cb30fe2c0abd7e.exe windows x86
5d3e08f8021dbbc80cce47b556398bd3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsWindow
GetDlgItem
BlockInput
LoadMenuA
DrawIcon
AppendMenuW
GetWindowTextLengthA
DrawTextA
GetFocus
GetDC
GetWindowTextA
GetCursor
AlignRects
CloseWindow
DialogBoxParamA
DrawIconEx
CopyImage
GetMenu
CopyIcon
DialogBoxParamW
AppendMenuA
GetDlgItem
DialogBoxParamA
CopyImage
InsertMenuA
CopyRect
DialogBoxParamW
CalcMenuBar
DrawTextW
GetWindowTextA
CloseWindow
AlignRects
EndDialog
GetFocus
IsMenu
GetWindowTextLengthA
GetCursor
CopyIcon
kernel32
lstrcmpA
GetLastError
lstrcatA
lstrcmpiA
Sleep
lstrcpynA
lstrcpyA
GlobalAlloc
GetFileAttributesA
GetCurrentThreadId
GetFileSize
GetLocalTime
GetCurrentThread
DeleteFileA
GetCurrentProcessId
HeapFree
GetCommandLineA
GetCurrentProcess
GetConsoleOutputCP
ExitProcess
ExitProcess
GetStringTypeA
ExitProcess
GetCommandLineA
ExitProcess
GetOEMCP
ExitProcess
GetModuleHandleA
ExitProcess
GetCurrentThread
ExitProcess
GetLocalTime
ExitProcess
lstrcmpA
ExitProcess
WideCharToMultiByte
ExitProcess
lstrcmpiA
ExitProcess
GetCurrentThreadId
GetStringTypeA
GetCurrentProcess
GetModuleHandleA
lstrcpynA
GetLastError
GetCurrentThreadId
lstrcatA
GetFileType
GlobalAlloc
DeleteFileA
ExitProcess
GetModuleFileNameA
GetOEMCP
HeapAlloc
Sleep
GetFileAttributesA
GetFileSize
GetCurrentThread
lstrcmpA
GetConsoleOutputCP
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.radta Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 7KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iaaaa Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ