Static task
static1
Behavioral task
behavioral1
Sample
c18087af5de586664422c8b1844dee8d49cc935b27078cbb632d724a4f46771e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c18087af5de586664422c8b1844dee8d49cc935b27078cbb632d724a4f46771e.exe
Resource
win10v2004-20220812-en
General
-
Target
c18087af5de586664422c8b1844dee8d49cc935b27078cbb632d724a4f46771e
-
Size
198KB
-
MD5
7a62dd6af92d259fd11b681446b4ab1e
-
SHA1
7280c669158baa18c1ff2996d3402ba9e9216f52
-
SHA256
c18087af5de586664422c8b1844dee8d49cc935b27078cbb632d724a4f46771e
-
SHA512
0a101f45370bc8142379d2e331db994f73a1b25524fa738ebe2c27820a2353723b666725322e704f7bde624559591dcccb6979a35c4f8e79999b11c17ebfecf9
-
SSDEEP
3072:r7+mrh42ya4kcFoWZHlWzzXGOJlBpPlPlUHV2I+h+7dUchBpp:rZrh42xcTHlrMXRlPN+7dd
Malware Config
Signatures
Files
-
c18087af5de586664422c8b1844dee8d49cc935b27078cbb632d724a4f46771e.exe windows x86
f9cb13eaf34ee76d9832e3edb319c9e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
kernel32
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 542B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE