Static task
static1
Behavioral task
behavioral1
Sample
c5840701da2220ef86c773c0ba64cff5c672a585e71174842510e8c622be35cb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5840701da2220ef86c773c0ba64cff5c672a585e71174842510e8c622be35cb.exe
Resource
win10v2004-20220901-en
General
-
Target
c5840701da2220ef86c773c0ba64cff5c672a585e71174842510e8c622be35cb
-
Size
311KB
-
MD5
7694eff2586d4ce672b403b1d63e9719
-
SHA1
292d59cd1499364af3649406c64cdcc16d219fa4
-
SHA256
c5840701da2220ef86c773c0ba64cff5c672a585e71174842510e8c622be35cb
-
SHA512
3ad2427b01444851308ec87f0798b6919f66d01086b1906887b0e4e056b5458c4a0045ec2b9a25568b05ddee483f000d449e1f05227e88ea440f0faf653c3624
-
SSDEEP
6144:OehMQTr6hzlFp4nIoj+YfgOWhz3lnu3FYEOJgHdqSQCkT2wxY5JUppef0sPm:Fhp4549FfgfJ3lnu36UHMSQF6Ua6eMs+
Malware Config
Signatures
Files
-
c5840701da2220ef86c773c0ba64cff5c672a585e71174842510e8c622be35cb.exe windows x86
15a8ffd03a85b9317360359d4766a6d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyState
ReleaseCapture
SetFocus
ShowWindow
EnumWindowStationsW
DefWindowProcA
GetClassLongW
RegisterClassA
SetCapture
kernel32
CreateFileMappingA
GetNumberOfConsoleInputEvents
GlobalSize
MapViewOfFile
GetFileType
CloseHandle
ExitProcess
UnmapViewOfFile
ReadFile
CreateFileA
GetFileSize
WriteFile
Sleep
lstrlenA
avifil32
AVIStreamSetFormat
AVIStreamGetFrameOpen
AVIStreamRelease
AVIFileCreateStreamA
AVISaveOptions
AVIFileGetStream
AVIFileRelease
AVIFileOpenA
AVIMakeCompressedStream
AVIStreamGetFrameClose
AVIStreamInfoA
AVIFileInit
AVIStreamGetFrame
AVIStreamWrite
gdi32
GetCurrentObject
CreateDIBSection
GetObjectA
DeleteObject
SetDIBitsToDevice
CombineRgn
SelectObject
CreateRectRgn
StretchBlt
FillRgn
DeleteDC
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ