Static task
static1
Behavioral task
behavioral1
Sample
5aaa0dc0a386280e126ba25272c027dc16be5726527660c38ec1e84515fab822.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aaa0dc0a386280e126ba25272c027dc16be5726527660c38ec1e84515fab822.exe
Resource
win10v2004-20221111-en
General
-
Target
5aaa0dc0a386280e126ba25272c027dc16be5726527660c38ec1e84515fab822
-
Size
511KB
-
MD5
96573527979c1dded721e3cdf72c2fff
-
SHA1
f3b620ed0a786b55e8355e9e5c9590593062129a
-
SHA256
5aaa0dc0a386280e126ba25272c027dc16be5726527660c38ec1e84515fab822
-
SHA512
0355fa6a1da3d7d36773821a51a947343f09c86e73a8f2d29ec50d06509689f53dae58356140c23f76eaeac9e79457d2c72a19c91b2a528c3bf7f148addc37b4
-
SSDEEP
12288:p4V0puvt8k7kEjINM10JDx5+sh8dJSJt:+Vfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
5aaa0dc0a386280e126ba25272c027dc16be5726527660c38ec1e84515fab822.exe windows x86
42a31f3b0003b924a92172ed23de5faa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
IsDebuggerPresent
CloseHandle
GetCommandLineA
FindClose
GetModuleFileNameW
Sleep
CloseHandle
GetConsoleAliasA
lstrlenA
GetStartupInfoA
HeapCreate
TlsAlloc
CreateFileMappingW
HeapDestroy
GetDriveTypeA
LocalSize
DeleteFileA
DeviceIoControl
GetModuleHandleA
user32
DispatchMessageA
CallWindowProcW
DestroyWindow
DispatchMessageA
DrawTextW
DestroyMenu
IsWindow
LoadImageA
GetIconInfo
GetWindowLongA
IsZoomed
FindWindowW
PeekMessageA
devenum
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 503KB - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ