Static task
static1
Behavioral task
behavioral1
Sample
f5a039c3a0190925a50fedc3191400bc87d096e8282c11c492de7a0c6ac4e24b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f5a039c3a0190925a50fedc3191400bc87d096e8282c11c492de7a0c6ac4e24b.exe
Resource
win10v2004-20220812-en
General
-
Target
f5a039c3a0190925a50fedc3191400bc87d096e8282c11c492de7a0c6ac4e24b
-
Size
65KB
-
MD5
c105911a2afd768480a7c27e1266b344
-
SHA1
9540fa13385ea5e7a36701203346e9c160b7708a
-
SHA256
f5a039c3a0190925a50fedc3191400bc87d096e8282c11c492de7a0c6ac4e24b
-
SHA512
d38ee85f636048adeb13a16bbf6dc7a7c5e29cbef160a9a6c5056eaf7650da686f80eb471fee0072c634a2de68f6cd872115f07eb20609f751107d0200988781
-
SSDEEP
1536:JOVsgdawcXFeMBgBYqnadBXva0Eo16HIVKR8j:JAsgUwbMBgrol9EocWKI
Malware Config
Signatures
Files
-
f5a039c3a0190925a50fedc3191400bc87d096e8282c11c492de7a0c6ac4e24b.exe windows x86
ca533f3241c24d8991ebd684216dccd4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetLastError
CreateFileW
LoadLibraryA
advapi32
RegOpenKeyExW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gR11 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gR22 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gR33 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gR44 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gR55 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gR625 Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data6 Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ