Static task
static1
Behavioral task
behavioral1
Sample
473f9bfc1cb97aee20f02caef604b64d2f0fb4cebe87d8795f8c5bc9e1de0844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
473f9bfc1cb97aee20f02caef604b64d2f0fb4cebe87d8795f8c5bc9e1de0844.exe
Resource
win10v2004-20220812-en
General
-
Target
473f9bfc1cb97aee20f02caef604b64d2f0fb4cebe87d8795f8c5bc9e1de0844
-
Size
155KB
-
MD5
017d4032b8651cd06d5dc77a9c24ef15
-
SHA1
f6cb9073e5c9dfbd3e20784921f2dc4d6b6a9c0f
-
SHA256
473f9bfc1cb97aee20f02caef604b64d2f0fb4cebe87d8795f8c5bc9e1de0844
-
SHA512
aa5fb87a810acecef5be05f3596cc3121da63cc6ffe2aaff8355ebc095f97e00304dab20e737766f33ffea629f235c33ef51a7dc568904e5f46588f75fe1d129
-
SSDEEP
3072:gjgazCShq6ozGfPx58ydEZr+Xl//hyF8NE:YJbhq6ozGfPs9ZrUXhy+a
Malware Config
Signatures
Files
-
473f9bfc1cb97aee20f02caef604b64d2f0fb4cebe87d8795f8c5bc9e1de0844.exe windows x86
ba05d84e514d525d5e7dc16304a77d64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CopyFileExA
FormatMessageA
DeleteFileA
CopyFileA
FlushFileBuffers
GetLastError
GetCommandLineA
DeleteFileW
lstrcmpA
CreateDirectoryA
CompareStringA
GetFileTime
GetStdHandle
lstrcatA
lstrlenA
GetCPInfo
OpenFile
GetLocalTime
OpenFileMappingA
ExitProcess
advapi32
RegDeleteValueW
RegQueryInfoKeyW
RegCreateKeyA
RegEnumKeyW
RegDeleteValueA
RegCreateKeyW
user32
GetFocus
CopyIcon
GetMenu
GetDlgItem
DrawIcon
GetScrollInfo
Sections
.ha68 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.f38f Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.99ad0 Size: 119KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e1819 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ