Static task
static1
Behavioral task
behavioral1
Sample
5832e05142e5e99a793d6a193dc5ea8fe2369b52b7ab11e79b5d4a6ad1c147dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5832e05142e5e99a793d6a193dc5ea8fe2369b52b7ab11e79b5d4a6ad1c147dd.exe
Resource
win10v2004-20221111-en
General
-
Target
5832e05142e5e99a793d6a193dc5ea8fe2369b52b7ab11e79b5d4a6ad1c147dd
-
Size
3.1MB
-
MD5
dffe81700ecbd1c91fc37af15427579b
-
SHA1
eda01e18b80655a349b4f23db8590e7964336ea4
-
SHA256
5832e05142e5e99a793d6a193dc5ea8fe2369b52b7ab11e79b5d4a6ad1c147dd
-
SHA512
e2c7b7426baa32d5d2539e06d7f1c74eb108b1c46e76d33dd4a8c19215964a08589efd09208eb5343a23f027881cadbc3badfd64e6708d0eb476176faf28b7cc
-
SSDEEP
98304:s5QF0lAOkMbnliqWHqh4k1Fx/3Nu2U/mv9jvyOos:siF0lVbnl7eqhxx/o2UevRvros
Malware Config
Signatures
Files
-
5832e05142e5e99a793d6a193dc5ea8fe2369b52b7ab11e79b5d4a6ad1c147dd.exe windows x86
e0684852489dc700f85b3dbf934928e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetSetStatusCallbackW
user32
DrawFrameControl
gdi32
GetRgnBox
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
ChangeServiceConfigW
shell32
SHGetDesktopFolder
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsW
ole32
DoDragDrop
oleaut32
VarBstrFromDate
setupapi
CM_Get_Parent
winmm
timeEndPeriod
version
GetFileVersionInfoW
dbghelp
MiniDumpWriteDump
netapi32
NetWkstaGetInfo
wintrust
CryptCATAdminAcquireContext
crypt32
CertFindCertificateInStore
oleacc
AccessibleObjectFromWindow
imm32
ImmGetOpenStatus
Sections
.text Size: 3.0MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE