Static task
static1
Behavioral task
behavioral1
Sample
5d323eb3b3b380cc74a56d12f034acab23a75ec21ca36de9156d5a1ad6aa8ebd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5d323eb3b3b380cc74a56d12f034acab23a75ec21ca36de9156d5a1ad6aa8ebd.exe
Resource
win10v2004-20220812-en
General
-
Target
5d323eb3b3b380cc74a56d12f034acab23a75ec21ca36de9156d5a1ad6aa8ebd
-
Size
819KB
-
MD5
6ce61f599479efe506920f86ece49fb7
-
SHA1
5000a77ff2cb35eb5852c289b29d767139c197fd
-
SHA256
5d323eb3b3b380cc74a56d12f034acab23a75ec21ca36de9156d5a1ad6aa8ebd
-
SHA512
450e8677d2d18eda37bf24615d4b342ac9de24b42bb78693ac48920561a1f547ab6a162762833f7890bfeb1b7b4ce455b73ac300f00c30c48b7ba0ab994074ec
-
SSDEEP
12288:n1TwR3H1/zDTgwBoGqA+FfbZfXBIi+67dDvf0Wb9T2Z94zQhXbAj236Ips3:K1fzqd/BIT67dLcWb9C94abs
Malware Config
Signatures
Files
-
5d323eb3b3b380cc74a56d12f034acab23a75ec21ca36de9156d5a1ad6aa8ebd.exe windows x86
dfb50957de82bc7f4c13a62fcc44c82f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
Beep
Beep
WriteConsoleW
lstrlenW
Beep
VirtualProtect
Beep
GetCommandLineA
GetModuleHandleA
SetCurrentDirectoryW
GetFullPathNameW
ReleaseMutex
Beep
SetThreadPriority
Beep
Beep
Beep
lstrcatA
GetModuleFileNameW
GetCurrentThreadId
TlsSetValue
FormatMessageA
Beep
Beep
DeleteFileW
GetPrivateProfileIntA
VirtualQuery
SetLocaleInfoA
catsrv
CreateComponentLibraryTS
DllCanUnloadNow
GetCatalogCRMClerk
OpenComponentLibraryTS
Sections
.text Size: 15KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ