Static task
static1
Behavioral task
behavioral1
Sample
5bf046ece0a652e118576e895c10b40a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bf046ece0a652e118576e895c10b40a.exe
Resource
win10v2004-20231215-en
General
-
Target
5bf046ece0a652e118576e895c10b40a
-
Size
20KB
-
MD5
5bf046ece0a652e118576e895c10b40a
-
SHA1
79a5f8e7b309373df71a490d4730fc75744a3340
-
SHA256
c6506e82162e23ad9f207ba5339c933b5f155b06c041722b1da9f43714a1a3ad
-
SHA512
84f31c7e13fca1ad28cda2eae9eb443728610d0ebc8bd4768e6746cdc62b2d4a6fbe3fedbb70571258add583db2dff3636a8e13952579f35bfeb4fce73a72385
-
SSDEEP
384:heTvgytN4sUzmKzvzPzMWnrTve2M5rXtYmFO+:uNpUzmKjjY2Tvex5TRF1
Malware Config
Signatures
Files
-
5bf046ece0a652e118576e895c10b40a.exe windows:4 windows x86 arch:x86
dcc8c6d669b26da921f1784bf489a5cc
Code Sign
4e:ae:89:b9:a5:8c:67:a5:47:0d:22:f9:ec:1b:78:2aCertificate
IssuerCN=EqaworoqeariwNot Before24/02/2012, 10:01Not After31/12/2039, 23:59SubjectCN=Eqaworoqeariw29:48:8b:bb:bc:01:f7:52:8b:1c:67:14:86:69:46:c7:54:0f:47:a2Signer
Actual PE Digest29:48:8b:bb:bc:01:f7:52:8b:1c:67:14:86:69:46:c7:54:0f:47:a2Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
ExitProcess
Sleep
user32
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetMessageA
DispatchMessageA
EndPaint
gdi32
GetObjectA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 768B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ