Static task
static1
Behavioral task
behavioral1
Sample
0fd5d4d7652a12a1a61f8d98b4d82553ba5fa626a2f89f3076162b8819bab751.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0fd5d4d7652a12a1a61f8d98b4d82553ba5fa626a2f89f3076162b8819bab751.exe
Resource
win10v2004-20220812-en
General
-
Target
0fd5d4d7652a12a1a61f8d98b4d82553ba5fa626a2f89f3076162b8819bab751
-
Size
742KB
-
MD5
66abefb083d181db3424810785ddd0d0
-
SHA1
d4b72c850488cbc8c38ff170d00969548866aa1e
-
SHA256
0fd5d4d7652a12a1a61f8d98b4d82553ba5fa626a2f89f3076162b8819bab751
-
SHA512
19ac2e65f3b2d48435e19b3b20ed458a07ba2c06dcffb89114dee6844862518a799b6b31cbe217b4a12572bc7e293414cdc8d94befeb31f5ef3b56aadc636c13
-
SSDEEP
12288:961evLi1fr0GWIakMxyrYIy8lzHI5Hut9E8tq0dySrSJlArEo7Ix4PPGHsEVoNO6:94SLi2Iatx4XwRuHE8tqCrAlArX+4Gzw
Malware Config
Signatures
Files
-
0fd5d4d7652a12a1a61f8d98b4d82553ba5fa626a2f89f3076162b8819bab751.exe windows x86
e988add464d171d8999b5518d9c73836
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
EnumResourceTypesA
GetCommandLineA
GetTimeFormatW
GetFileAttributesW
HeapDestroy
CloseHandle
GetStartupInfoA
GetConsoleTitleA
GetDriveTypeW
SetLastError
CloseHandle
GetCommandLineA
HeapCreate
WriteConsoleA
GetModuleHandleA
DeleteFileA
CreateEventW
GlobalFlags
lstrlenA
advapi32
IsValidSid
RegQueryValueW
IsValidSid
IsValidAcl
IsValidSecurityDescriptor
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
RegCreateKeyExW
IsValidSid
InitializeSid
RegDeleteValueA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ