Static task
static1
Behavioral task
behavioral1
Sample
57c83a5fbd30399640ba751189db462e785cc54eee79fc069916f2cd65458d59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57c83a5fbd30399640ba751189db462e785cc54eee79fc069916f2cd65458d59.exe
Resource
win10v2004-20220812-en
General
-
Target
57c83a5fbd30399640ba751189db462e785cc54eee79fc069916f2cd65458d59
-
Size
742KB
-
MD5
00490eb559cccc98f4f5f9e28fbd1435
-
SHA1
14d2510e14bbec9bcca51953abd0570a849b178f
-
SHA256
57c83a5fbd30399640ba751189db462e785cc54eee79fc069916f2cd65458d59
-
SHA512
8b1fd7023d89b7356a8968f77b00c946ca2d6398baa5d2c22152540766ae6e50df9846c6a8b7a04387a0719742c2ee7430a7bb0fb010573b5d796851e5916401
-
SSDEEP
12288:td6H24C/7Ls/WR1bYxZO7KjSt+c7VpS3CrLmLJfkwBzuFwfJdUpReUjy9w3hHP+H:Xf4Svo01InjPy/WSgdUpEM3N+L
Malware Config
Signatures
Files
-
57c83a5fbd30399640ba751189db462e785cc54eee79fc069916f2cd65458d59.exe windows x86
7c76ebd9308b29c785904523ca97d65f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetTimeFormatW
SetLastError
GetStartupInfoA
GetConsoleTitleA
GlobalFlags
GetFileAttributesW
CloseHandle
GetEnvironmentVariableA
CloseHandle
lstrlenA
HeapDestroy
HeapCreate
WriteConsoleA
GetCommandLineA
GetModuleHandleA
CreateEventW
EnumResourceTypesA
DeleteFileA
GetDriveTypeW
advapi32
IsValidSid
CreateProcessAsUserW
IsValidSid
IsValidSecurityDescriptor
RegQueryValueW
InitializeSid
IsValidSid
RegEnumKeyA
IsValidSid
IsValidAcl
RegCreateKeyExW
IsValidSid
RegDeleteValueA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ