Static task
static1
Behavioral task
behavioral1
Sample
288abcb7a5aed0cad24e1ca820326c5a8f0fbbd8b0327078b6464438a6906337.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
288abcb7a5aed0cad24e1ca820326c5a8f0fbbd8b0327078b6464438a6906337.exe
Resource
win10v2004-20220812-en
General
-
Target
288abcb7a5aed0cad24e1ca820326c5a8f0fbbd8b0327078b6464438a6906337
-
Size
107KB
-
MD5
42faeb40be0bc2e07b7fabb0be8757d5
-
SHA1
42ab7a90287a0c0413c1886ed9e1b40f97ae2b3f
-
SHA256
288abcb7a5aed0cad24e1ca820326c5a8f0fbbd8b0327078b6464438a6906337
-
SHA512
bd09db01b4fce321f3f312a8d9db11304b21fad213b5267e42f103af3f6f945a86b1e705808cf3e8b60a7ba9048fa170186e3d33b8ee2c1b619afeec89ae58a2
-
SSDEEP
1536:xp8O5hTXpZ9yZT8HxguR9TmoTt1zY26CjHDD6DzSNVHiu4w3KUq1/:xhhTv9NK+9KoTt76CjHDeAqw3KU6/
Malware Config
Signatures
Files
-
288abcb7a5aed0cad24e1ca820326c5a8f0fbbd8b0327078b6464438a6906337.exe windows x86
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tsyzmxy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE