Static task
static1
Behavioral task
behavioral1
Sample
1c85cfcd6db231432450b633e8eb37babfab9a364180f5458557872be3b7ddf7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c85cfcd6db231432450b633e8eb37babfab9a364180f5458557872be3b7ddf7.exe
Resource
win10v2004-20220901-en
General
-
Target
1c85cfcd6db231432450b633e8eb37babfab9a364180f5458557872be3b7ddf7
-
Size
32KB
-
MD5
5ec4a27f37847e43d6e409b9a15cabb6
-
SHA1
6ad17bca7d772a5eea632a9df5c24151ea127c34
-
SHA256
1c85cfcd6db231432450b633e8eb37babfab9a364180f5458557872be3b7ddf7
-
SHA512
3bc2f3e7bcdcdd1f6ab842e00a2c355cfe66ca2c6e913e0ba310edc67a61a41581af8bb65783cee991410d4af8cbebae44787f795fffc55ab76b4315fdf6d4a2
-
SSDEEP
384:EX+W2fLzU0/Un1MGIpJsIdhyAg0KrLxLWuFA:hzzGn1MGIXPdU9rdLWu6
Malware Config
Signatures
Files
-
1c85cfcd6db231432450b633e8eb37babfab9a364180f5458557872be3b7ddf7.exe windows x86
778c2a9b54bc5b92271552e0afcdc969
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreW
GetCurrentDirectoryW
WriteConsoleA
GetDiskFreeSpaceW
GetStringTypeA
CompareStringW
GetModuleHandleA
HeapCreate
lstrcatA
GetPrivateProfileIntW
GetVolumeInformationA
FindResourceW
GetEnvironmentVariableW
SetLastError
ReadConsoleW
GetTimeFormatW
HeapFree
lstrlenA
GetShortPathNameA
gpedit
CreateGPOLink
DeleteGPOLink
ImportRSoPData
BrowseForGPO
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE