Static task
static1
Behavioral task
behavioral1
Sample
5b5e090878d37366c95829bfbd5233a2ff6bf17ec9149e4b31b063d8ea9569fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b5e090878d37366c95829bfbd5233a2ff6bf17ec9149e4b31b063d8ea9569fe.exe
Resource
win10v2004-20220901-en
General
-
Target
5b5e090878d37366c95829bfbd5233a2ff6bf17ec9149e4b31b063d8ea9569fe
-
Size
975KB
-
MD5
a97436e984d3394c2a36479e84b16ce4
-
SHA1
33ab8368a70a099e9b33a6cd6bf129c86ffbdad0
-
SHA256
5b5e090878d37366c95829bfbd5233a2ff6bf17ec9149e4b31b063d8ea9569fe
-
SHA512
5b8420c1dd29c8e6dc95e5447705d90afe30ec7df14f2f167f4166f77d02b03cb9cd35e7924396b508828ce7cdb11509dcd0284b9b60d84d836e532ed4660a2f
-
SSDEEP
24576:LCaJ9SMl0tKopAEgJ4bbBMExCyQdYltZjxhpuHxsQ9:LB/l0KoYmSuPVnsxsO
Malware Config
Signatures
Files
-
5b5e090878d37366c95829bfbd5233a2ff6bf17ec9149e4b31b063d8ea9569fe.exe windows x86
61363e2e4377328c8582645438bf637c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
user32
IsChild
advapi32
LockServiceDatabase
Sections
Size: - Virtual size: 77.9MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 772KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE