Static task
static1
Behavioral task
behavioral1
Sample
56384a314a85c8326bb8043eb3dff798d6e56f5039248dca798b8d0bcac47a5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
56384a314a85c8326bb8043eb3dff798d6e56f5039248dca798b8d0bcac47a5b.exe
Resource
win10v2004-20221111-en
General
-
Target
56384a314a85c8326bb8043eb3dff798d6e56f5039248dca798b8d0bcac47a5b
-
Size
224KB
-
MD5
ac209f5238b5f156f087d26f4da1ec25
-
SHA1
bfdf8bd843f54482f4636d8628832ecf07d64acd
-
SHA256
56384a314a85c8326bb8043eb3dff798d6e56f5039248dca798b8d0bcac47a5b
-
SHA512
33bbd830783facc07e8ab666d31da886d38e45aa81f6d3408ca972934d88a1066a9be5d8dad8b81d75e984b0540ee2f4dd2404d9640fbc91ff264c7bae05381a
-
SSDEEP
3072:XVTo6C1AO+m8MyuGXllbcjMnW2TfHjR8OTSQfTC0ipIjkD:F86/JmmplnW2PRTTC0VS
Malware Config
Signatures
Files
-
56384a314a85c8326bb8043eb3dff798d6e56f5039248dca798b8d0bcac47a5b.exe windows x86
c45b5a02a7efe1517416aa5eb3d7aca0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
CreateFileW
CloseHandle
GetWindowsDirectoryW
VirtualAllocEx
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data9 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data8 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data7 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data6 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ