Static task
static1
Behavioral task
behavioral1
Sample
f5b7918931703fe2521287633c2ffd43db03eb0cb51a9d5cee4adcce7689ad7a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5b7918931703fe2521287633c2ffd43db03eb0cb51a9d5cee4adcce7689ad7a.exe
Resource
win10v2004-20220812-en
General
-
Target
f5b7918931703fe2521287633c2ffd43db03eb0cb51a9d5cee4adcce7689ad7a
-
Size
194KB
-
MD5
59f3092b59279603e857674420878c3f
-
SHA1
4efb728fef7633952f1155a9190b93c02636f9dd
-
SHA256
f5b7918931703fe2521287633c2ffd43db03eb0cb51a9d5cee4adcce7689ad7a
-
SHA512
d78159d7c351a05b9a1b3949c83c4fc5ba7470f11405748fbd2e9b765378b1dcafe66f4d4beedff75ae395175d81c41069181c74fb230bf171044899b10eeb03
-
SSDEEP
3072:XCYNXtBS06y43kkBYgflya2DaClF73XcGgSHRcQjE8EavSl9YyW902Hx6j6J:XCYVt+3tflya2DHF73XPRcQHbvKu
Malware Config
Signatures
Files
-
f5b7918931703fe2521287633c2ffd43db03eb0cb51a9d5cee4adcce7689ad7a.exe windows x86
6a781b5e7d7a9ab8c44927994ff2679a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
advapi32
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
kernel32
VirtualAllocEx
GetSystemTimeAsFileTime
lstrlenA
LocalAlloc
EnumResourceNamesW
MultiByteToWideChar
CreateProcessA
RaiseException
OpenWaitableTimerW
WideCharToMultiByte
InterlockedExchange
rpcrt4
NdrFixedArrayFree
UuidCreate
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ