Static task
static1
Behavioral task
behavioral1
Sample
18c1aab92e57e57adbb87d3253464593c4665742aa943fd822e2c8ac039134b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18c1aab92e57e57adbb87d3253464593c4665742aa943fd822e2c8ac039134b1.exe
Resource
win10v2004-20220812-en
General
-
Target
18c1aab92e57e57adbb87d3253464593c4665742aa943fd822e2c8ac039134b1
-
Size
84KB
-
MD5
92fd05eb117fb8be6963b6412f96f752
-
SHA1
5311d6619b9927d074a5e0043d29d2bb7a4fc70b
-
SHA256
18c1aab92e57e57adbb87d3253464593c4665742aa943fd822e2c8ac039134b1
-
SHA512
2891082bd7c9b4e99f018b9e50f801eafd22a480ac5f0a9e86b3587183fc62d132653da6ea8e7164f8070be03c831a64bcbea462efa779ca7b8a4e5d88172e84
-
SSDEEP
1536:6qHQuHiRsjIqZl7u7M/GEInor9BTCV4hwJB6:HHQ+ys0W47MOEOopBa4hw+
Malware Config
Signatures
Files
-
18c1aab92e57e57adbb87d3253464593c4665742aa943fd822e2c8ac039134b1.exe windows x86
88183412b9022d5e5195cdadefacc3a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
_wtoi
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
wcscmp
_wcsicmp
swprintf
??2@YAPAXI@Z
wcsncpy
wcscat
wcscpy
kernel32
GetStartupInfoW
GetModuleHandleW
FindFirstFileW
DeleteFileW
FindNextFileW
GetLastError
FindClose
LoadLibraryW
GetProcAddress
GetFileAttributesW
GetModuleFileNameW
CreateFileW
GetFileSize
VirtualAlloc
ReadFile
CloseHandle
GetTempPathW
SetFilePointer
ExitProcess
SetFileAttributesW
CreateDirectoryW
VirtualFree
WriteFile
GetSystemDirectoryW
GetDriveTypeW
user32
DefWindowProcW
DestroyWindow
PostQuitMessage
RegisterClassW
CreateWindowExW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
gdi32
GetStockObject
advapi32
RegOpenKeyExW
RegCloseKey
RegSetValueExW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE