Static task
static1
Behavioral task
behavioral1
Sample
5307bddde533f0e5908172b06ca4c6ede5ed6c60d92c9fcb8cde0e64ca1048aa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5307bddde533f0e5908172b06ca4c6ede5ed6c60d92c9fcb8cde0e64ca1048aa.exe
Resource
win10v2004-20221111-en
General
-
Target
5307bddde533f0e5908172b06ca4c6ede5ed6c60d92c9fcb8cde0e64ca1048aa
-
Size
301KB
-
MD5
02983d1ee58659ef00f8224fa6f47140
-
SHA1
1fc597b182be27ae5b4cc8aba778d3bb3af98144
-
SHA256
5307bddde533f0e5908172b06ca4c6ede5ed6c60d92c9fcb8cde0e64ca1048aa
-
SHA512
9659e33c67a4250f1f08d75d7af65fc72b672ca5ee672eca853266a2b9fe82045ac86b63df2ab7054c25a266b3b2c8ed71029cb43591538aec1607fbfff4a258
-
SSDEEP
6144:QFGJaxOE5IKV+JbS41CzuxhgdQMLVOQHHJfJrXM61a3FicnWV72ex:T8D5IK8P1CzhyMLZJZ1a3Ficn4Se
Malware Config
Signatures
Files
-
5307bddde533f0e5908172b06ca4c6ede5ed6c60d92c9fcb8cde0e64ca1048aa.exe windows x86
1f1017668040a2146d5a062013f179b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
HeapCreate
GetTickCount
GetStringTypeW
GetConsoleTitleA
TlsAlloc
GetShortPathNameW
GetDriveTypeA
lstrcmpiA
GetModuleHandleW
GetVersion
GetLogicalDrives
HeapFree
GetStdHandle
GetLastError
SetEnvironmentVariableA
SetPriorityClass
SetFilePointer
GetModuleHandleA
SetLastError
GetExitCodeProcess
lstrcatW
GetLocalTime
netshell
DllCanUnloadNow
HrLaunchConnection
DllGetClassObject
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE