Static task
static1
Behavioral task
behavioral1
Sample
5fd5d5dbc337c378560fae53302893c419f66b4286529544649631f66e45cc4c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5fd5d5dbc337c378560fae53302893c419f66b4286529544649631f66e45cc4c.exe
Resource
win10v2004-20230220-en
General
-
Target
5fd5d5dbc337c378560fae53302893c419f66b4286529544649631f66e45cc4c
-
Size
582KB
-
MD5
e2df92a8eed19eba8018ee3caa271dee
-
SHA1
d304cc25fd29697126d9e2e85d78875147f64ee0
-
SHA256
5fd5d5dbc337c378560fae53302893c419f66b4286529544649631f66e45cc4c
-
SHA512
6f93f1fd233b13e1344f08847cb4d18773c9e1b2c45edb52f5ab19bc27edf1f94387ddd66e10e40ab9f39638c1f9a6ab697b9e30e380aa0cbee41edce564eef1
-
SSDEEP
12288:TbSWqgI2MT10E8Psm5BqSJIP5yN9pvS5WC1zJlavRixxMI7P7Uzy5RuqEmanOdnv:6tjRm5BqpPY3FS5hLav4BkzymZman0ZF
Malware Config
Signatures
Files
-
5fd5d5dbc337c378560fae53302893c419f66b4286529544649631f66e45cc4c.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 292KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE