Static task
static1
Behavioral task
behavioral1
Sample
b5d8cb75a7af41a07e209ee40c0a4267227f9c4b47df29d1e045f34e76c891cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5d8cb75a7af41a07e209ee40c0a4267227f9c4b47df29d1e045f34e76c891cc.exe
Resource
win10v2004-20220812-en
General
-
Target
b5d8cb75a7af41a07e209ee40c0a4267227f9c4b47df29d1e045f34e76c891cc
-
Size
42KB
-
MD5
6357f6224fa6ea1306e94c90e8d163b2
-
SHA1
9d416bc0b40ec5ed920cbf4ad562842c8360d17b
-
SHA256
b5d8cb75a7af41a07e209ee40c0a4267227f9c4b47df29d1e045f34e76c891cc
-
SHA512
db3795fa0902875eae2b0861be2998cac01df8f166d4ca2ffc7b3b7d252fa4861abe68c95aed6f7d85b5c2778130f5257befcc7bbc1dde9de06fcb2854ac0052
-
SSDEEP
768:yIc8NUgfb589GWYJhtmRwYIWQ2EODv6E6eQrHiJx5lBFc:ba682tYI+EODCEtyHoxvBF
Malware Config
Signatures
Files
-
b5d8cb75a7af41a07e209ee40c0a4267227f9c4b47df29d1e045f34e76c891cc.exe windows x86
9b0baa54619748651d717cfc5fee67c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyA
RegSetValueExA
kernel32
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
FreeLibrary
FreeResource
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetVersionExA
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
OpenFileMappingA
SetFileAttributesA
SetUnhandledExceptionFilter
SizeofResource
UnmapViewOfFile
WinExec
WriteFile
msvcrt
_strupr
__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
atexit
memcpy
memset
signal
strcat
strcmp
strcpy
strlen
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
FindWindowA
GetClassNameA
GetMessageA
GetWindowThreadProcessId
KillTimer
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
SetTimer
ShowWindow
TranslateMessage
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE