Static task
static1
Behavioral task
behavioral1
Sample
c2403027703b2785cee14807b6e0816045a52b32be0aea9284869fce476f1bfa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2403027703b2785cee14807b6e0816045a52b32be0aea9284869fce476f1bfa.exe
Resource
win10v2004-20220812-en
General
-
Target
c2403027703b2785cee14807b6e0816045a52b32be0aea9284869fce476f1bfa
-
Size
111KB
-
MD5
91c40a18e2deaf3425fd32b7945cb72e
-
SHA1
b7444fb8294180d11bc955d1c47a25a365a94fb6
-
SHA256
c2403027703b2785cee14807b6e0816045a52b32be0aea9284869fce476f1bfa
-
SHA512
ba5b6502697b671d2d948ed80fd1f43e209c8230f1cab83e4c39af379474d02b6d6a987f5e87e4dc421aaed39a5cd4e262f1a7eec5e641b2cac00ae40f535dac
-
SSDEEP
768:EpdLQbrRExcB6lvSYl8Q9Ua4Iq2mygcWkLEa5yC/J0joQJk9nGj:SLQBEJll8QqbIOyNvLEaWlJ
Malware Config
Signatures
Files
-
c2403027703b2785cee14807b6e0816045a52b32be0aea9284869fce476f1bfa.exe windows x86
b85be84cfcd4e20d2c2e5a652a32f9ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExA
WriteFile
FormatMessageA
DeleteFileW
ExitProcess
lstrcatA
GetLocalTime
GlobalFree
GetFileType
FlushFileBuffers
GetStdHandle
ExitThread
lstrcmpA
GetLastError
lstrlenA
CompareStringA
GetCommandLineA
OpenFileMappingA
user32
DrawTextW
DialogBoxParamA
advapi32
RegOpenKeyA
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyW
Sections
.4c28 Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.c15g4 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8g2d0 Size: 55KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.89d4b Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0b9ac Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ