Static task
static1
Behavioral task
behavioral1
Sample
5768b708998a03ca803b21eb93652d617fd5044440c546dffbe3a6648d40c118.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5768b708998a03ca803b21eb93652d617fd5044440c546dffbe3a6648d40c118.exe
Resource
win10v2004-20220812-en
General
-
Target
5768b708998a03ca803b21eb93652d617fd5044440c546dffbe3a6648d40c118
-
Size
303KB
-
MD5
0dfa28e55940b9b3b3ee1df6f21abbb0
-
SHA1
2b25ba6eb855938040c8b4b4f96d5b1f84810128
-
SHA256
5768b708998a03ca803b21eb93652d617fd5044440c546dffbe3a6648d40c118
-
SHA512
3ca511a8bfeb5746c5bb4fff8714ee98cb3afcdb6fcf929a97e8d12995ec8f814df51976d0b3741e3eaa6f05f29c859a4d2bf6ae50741fff508403ceb338878b
-
SSDEEP
6144:rlEnCDlBT/AZoNUOgi/LC2jdYZvDWGtffxrYSGiw+C3kZWg7ggWU:rqnOl5Zu26LTSSDwN3/g7gBU
Malware Config
Signatures
Files
-
5768b708998a03ca803b21eb93652d617fd5044440c546dffbe3a6648d40c118.exe windows x86
1897a9e48383c9c8d7977b3c1060fce7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CreateDirectoryA
SetFilePointer
GetConsoleTitleA
GetStringTypeW
GetDriveTypeA
DeleteFileW
HeapCreate
GetShortPathNameW
IsValidCodePage
HeapAlloc
GetModuleHandleA
DeleteFileW
GetExitCodeProcess
GetStringTypeW
GetModuleHandleW
GetVersion
GetStdHandle
GetLastError
SetCurrentDirectoryA
DeleteFileW
GetTickCount
HeapFree
mstscax
DllRegisterServer
DllGetTscCtlVer
DllUnregisterServer
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ