Static task
static1
Behavioral task
behavioral1
Sample
362e47cbabb0bcb523bb6fe0597cceacf722d1d06bb83c083b82edc9e6dcad62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
362e47cbabb0bcb523bb6fe0597cceacf722d1d06bb83c083b82edc9e6dcad62.exe
Resource
win10v2004-20220812-en
General
-
Target
362e47cbabb0bcb523bb6fe0597cceacf722d1d06bb83c083b82edc9e6dcad62
-
Size
26KB
-
MD5
60ae9bc089972c9b410a57d801711e65
-
SHA1
0e84462ab1181ccf3d18e5dab7d4165096e73b30
-
SHA256
362e47cbabb0bcb523bb6fe0597cceacf722d1d06bb83c083b82edc9e6dcad62
-
SHA512
3e532fcba520df850697f1bba97a6b5dab2fb53ea6a9dc8c9bc6ace410590140a3076faab9b458d627513052cf82bf8a73a5714078b722edb667414c7d0c46ba
-
SSDEEP
384:zBETrIYHgfedEcoUpOhttDoWJCzmhlZk1TPsMIEXILN4b5/ghw:ti3AGpoUpOhHEzmhjk15XIN4b9l
Malware Config
Signatures
Files
-
362e47cbabb0bcb523bb6fe0597cceacf722d1d06bb83c083b82edc9e6dcad62.exe windows x86
8b4054aa191f62cfc3201c17a9223262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
CreateEventW
GetCommandLineA
DeleteFileA
GlobalFlags
CloseHandle
CloseHandle
HeapCreate
GetFileAttributesW
lstrlenA
WriteConsoleA
EnumResourceTypesA
SetLastError
GetConsoleTitleA
GetEnvironmentVariableA
GetCommandLineA
GetDriveTypeW
GetStartupInfoA
GetTimeFormatW
GetModuleHandleA
advapi32
RegQueryValueW
CreateProcessAsUserW
IsValidSid
IsValidAcl
RegDeleteValueA
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidSid
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbhzjpm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE