Static task
static1
Behavioral task
behavioral1
Sample
b663e96db69533957299a9567fa0f276de2b4d0f05f255c00a7c0a62cedce982.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b663e96db69533957299a9567fa0f276de2b4d0f05f255c00a7c0a62cedce982.exe
Resource
win10v2004-20220812-en
General
-
Target
b663e96db69533957299a9567fa0f276de2b4d0f05f255c00a7c0a62cedce982
-
Size
10KB
-
MD5
0246488b917616fb1603bfbf89695061
-
SHA1
c7b47e2dccaebd8f94ca8f7023d6f8dac69c66fe
-
SHA256
b663e96db69533957299a9567fa0f276de2b4d0f05f255c00a7c0a62cedce982
-
SHA512
dbe3d1990d1ad6d55f81b884e30888af006bb9d66533ac2d46b2567ec5187ff16005c964a2e7686968e532a8f8be575a0a3fd45dbe1bdc64eb2927499e991a46
-
SSDEEP
192:Yid+Ad/CFMmc1hIDxZCtNE3YmZhyh42gpBw+rHZlVPsbHfy+I:iAdKqmJ9cYoOyOgQHrJ
Malware Config
Signatures
Files
-
b663e96db69533957299a9567fa0f276de2b4d0f05f255c00a7c0a62cedce982.exe windows x86
0f196bcea26bb99f2d662f996940aa7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
lstrcatA
CreateDirectoryA
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
VirtualAllocEx
LoadLibraryA
WriteFile
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
LocalFree
WriteProcessMemory
DeleteFileA
CreateRemoteThread
Process32First
lstrlenA
Process32Next
CreateFileA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE