Static task
static1
Behavioral task
behavioral1
Sample
f5ec883b3f6ff21ac8334259d41052289fd345004d09c3ea5ab23e934a21964d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5ec883b3f6ff21ac8334259d41052289fd345004d09c3ea5ab23e934a21964d.exe
Resource
win10v2004-20220812-en
General
-
Target
f5ec883b3f6ff21ac8334259d41052289fd345004d09c3ea5ab23e934a21964d
-
Size
190KB
-
MD5
1cb227d4a6a3b17712a55101f3e21605
-
SHA1
ea098dd191498f7baccda55379efbe57d00623e0
-
SHA256
f5ec883b3f6ff21ac8334259d41052289fd345004d09c3ea5ab23e934a21964d
-
SHA512
875c1f98a1112900fdb04b079a697b9ea45239c44563a3ce29e160c55397804f40f4adf32a8912394caf8dc0fb5fa87774db74a05e573e8aa08cb9c0aeb9d043
-
SSDEEP
3072:b/SaSswyTCpwBvg70nw6Ke+P9zKUD7KHg2tovj9plWPb5RvTOeQYnuDV5Haip0Ow:b/bTC6ndKeqzP7KHgVvj9aPb76eQYuX+
Malware Config
Signatures
Files
-
f5ec883b3f6ff21ac8334259d41052289fd345004d09c3ea5ab23e934a21964d.exe windows x86
dd1c40601b712c35527a1cd353701a8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 56KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 44KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE