Static task
static1
Behavioral task
behavioral1
Sample
5e6f03aabf02363c33177ca97461953682df96f93ab6fe8b97e0266457de73d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e6f03aabf02363c33177ca97461953682df96f93ab6fe8b97e0266457de73d7.exe
Resource
win10v2004-20220812-en
General
-
Target
5e6f03aabf02363c33177ca97461953682df96f93ab6fe8b97e0266457de73d7
-
Size
498KB
-
MD5
7245bae21388d90eb91f8fcde67a8b9e
-
SHA1
682edd6a786957f6a32dc3060ffdb671a0b3e1ab
-
SHA256
5e6f03aabf02363c33177ca97461953682df96f93ab6fe8b97e0266457de73d7
-
SHA512
8eb60de3c8578d09e614072c50c5e6083d68cbb2afb55df6830da6b0dd0c8c0d55c9a95374f462f32d3d27401c956cd9c6f41a7f25f19dd6464122784766ca7e
-
SSDEEP
6144:Nr0hKBgqJMYucH+Sv2UDn+C0jj3+VAurnVv4Ch9s7cae6ZaKSqeABLs1SWcDDDDX:Nr0hqgqJMaHp27j34GCfs7cafE
Malware Config
Signatures
Files
-
5e6f03aabf02363c33177ca97461953682df96f93ab6fe8b97e0266457de73d7.exe windows x86
991a1129e05a2d5e3f9c73db7b632332
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sleep
SuspendThread
DeleteFileA
GetFileAttributesA
HeapCreate
GetCommandLineA
TlsGetValue
PulseEvent
GetStartupInfoA
CreateFileMappingA
IsBadStringPtrW
ReleaseMutex
DeviceIoControl
lstrlenA
IsDebuggerPresent
GetModuleFileNameW
CreateFileA
GetDriveTypeA
TlsAlloc
user32
IsZoomed
DestroyMenu
CallWindowProcW
LoadImageA
IsWindow
DestroyWindow
FindWindowW
PeekMessageA
GetWindowLongA
DrawTextW
DispatchMessageA
GetIconInfo
DispatchMessageA
colbact
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
cryptui
CryptUIDlgCertMgr
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ