Static task
static1
Behavioral task
behavioral1
Sample
5aea08cd719a7a1c67db684d19377306979f41c12ba47c9660c35c3b7a60a9d1.exe
Resource
win10v2004-20230221-en
General
-
Target
5aea08cd719a7a1c67db684d19377306979f41c12ba47c9660c35c3b7a60a9d1
-
Size
4.9MB
-
MD5
78b3c907a2d367920906c88959131f6a
-
SHA1
50d4d92aa7df4ba169965344a7e0daaf61f26120
-
SHA256
5aea08cd719a7a1c67db684d19377306979f41c12ba47c9660c35c3b7a60a9d1
-
SHA512
4bdf5e6c6f429bd5a6cc0645838b11089a5696627129484f21cb27b664c929caf0628f7410d3fe44fb12cbca3a7773a021d58adb7fa321abc6aeaab28c7a4e27
-
SSDEEP
98304:BeYw60RzVybSQU0zPsNp+YEbisykH9TZRNp3uuwQLRe3FiCDpupZ:4x680NzzPsNpii1i/Np3VwQNe3FiWp
Malware Config
Signatures
Files
-
5aea08cd719a7a1c67db684d19377306979f41c12ba47c9660c35c3b7a60a9d1.exe windows x64
6759e4028b9f8d1e0b32ee5a70a280d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CopyFileA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CloseClipboard
advapi32
RegCreateKeyExA
Sections
.text Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
U%#GYERW Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
U%#GYERW Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U%#GYERW Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 412KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ