Static task
static1
Behavioral task
behavioral1
Sample
d96f05278c7cb6b84d9939780497f1ab37cb1b7af5313696a6b3ea306fad2106.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d96f05278c7cb6b84d9939780497f1ab37cb1b7af5313696a6b3ea306fad2106.exe
Resource
win10v2004-20220812-en
General
-
Target
d96f05278c7cb6b84d9939780497f1ab37cb1b7af5313696a6b3ea306fad2106
-
Size
88KB
-
MD5
69e4992893715592591fd63c77308ff0
-
SHA1
01316b70d5a39e58c95b74f9fcc56fafb3475b6a
-
SHA256
d96f05278c7cb6b84d9939780497f1ab37cb1b7af5313696a6b3ea306fad2106
-
SHA512
e4a83bad0b6a11e7899cc522a44f632495ccd9aa3d2af2e7a70cf2d3306713217ba741ed1d056e9b4f724ef1696c22d5802e9ab0a2aad3632028fb49286437c4
-
SSDEEP
1536:zZi06EzXEDHpMiquvMWlTLjl4HVXSc3tvl+Sigtf7iTvlPjfvyyACmqRp41kS0:zf6oXENz3vMWlT6dSI8SiITi57vbFL4U
Malware Config
Signatures
Files
-
d96f05278c7cb6b84d9939780497f1ab37cb1b7af5313696a6b3ea306fad2106.exe windows x86
a4cddb0e81d3ac529ea817dcfad884a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
msi
ord67
ord204
ord112
user32
CharToOemA
shell32
SHGetSpecialFolderPathA
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
_findfirst
sprintf
_findclose
_vsnprintf
isspace
_initterm
kernel32
GetStartupInfoA
GetModuleHandleA
DeleteFileA
CreateMutexA
GetLastError
WriteFile
GetTempPathA
SetCurrentDirectoryA
CreateFileA
OutputDebugStringA
CreateProcessA
WaitForSingleObject
CloseHandle
Sleep
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE