Static task
static1
Behavioral task
behavioral1
Sample
514a01083a781fc8aef5c2ec313b8103813838e5748329a4dc28c44377051e8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
514a01083a781fc8aef5c2ec313b8103813838e5748329a4dc28c44377051e8d.exe
Resource
win10v2004-20220812-en
General
-
Target
514a01083a781fc8aef5c2ec313b8103813838e5748329a4dc28c44377051e8d
-
Size
32KB
-
MD5
4038ddca17986cad39425d372ccf3830
-
SHA1
491369d57a6472b29cab3d8caf177e2e3c950776
-
SHA256
514a01083a781fc8aef5c2ec313b8103813838e5748329a4dc28c44377051e8d
-
SHA512
1896a8c84db53d15d4d39d1e6f96a76ca18e67f8c36d401a7817f13fb795a1c929dff0375c6a2b17c522daeafe09ede37e18d8053a4e6e1bedae7780212d8055
-
SSDEEP
384:YwbC0ABHZyV2WF/n+I3dbW4bzpls1FP6/f5l45oZJny36Onoy8FeQ9I:Yw/Ow2+J3Q1pk5l45ovvOnoy5n
Malware Config
Signatures
Files
-
514a01083a781fc8aef5c2ec313b8103813838e5748329a4dc28c44377051e8d.exe windows x86
e12958d81c1563c107c39f6521507901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
WriteProcessMemory
GetCurrentProcess
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
SetFilePointer
LoadLibraryA
GetFileSize
SetUnhandledExceptionFilter
GetTickCount
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleFileNameA
FreeLibrary
Sleep
GetLocalTime
ReadFile
GetVersionExA
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 974B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE