Static task
static1
Behavioral task
behavioral1
Sample
updater.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
updater.exe
Resource
win10v2004-20220812-en
General
-
Target
updater.exe
-
Size
1.9MB
-
MD5
3c5e47dcf5235000e08b97d1eae7c591
-
SHA1
d68f1ac6dabbc8d3f910a174d6f6953eaf181f63
-
SHA256
f7c5ebf3a25d03d30c1b96c537b996315fdf3814925617038ec46ff38dcecae6
-
SHA512
4d6f487f7a535d5b2630fa0c0efcb709006603bdaadcb032611b3a56d40bd1aa69ad2e7e3149b05c70ad78f6641d0d0fa66b9051cdfd9f3772fad27481dbc1bd
-
SSDEEP
49152:zouI5SO0sXEGqhte7h9IJkUFmpdubJZLduMc68IRKGBujc/cw9lP:cu25lXshOTIJf4dYJ6MD8yuoR
Malware Config
Signatures
Files
-
updater.exe.exe windows x64
7dbd2319b33ed25eb7ad7d0162c2bb3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
malloc
memset
_get_pgmptr
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
kernel32
Sleep
GetWindowsDirectoryA
CreateProcessA
SetUnhandledExceptionFilter
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ