Static task
static1
Behavioral task
behavioral1
Sample
b18253317bacd006edcdde228f4970d8a4888289a79fb7794f56aa84551b811f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b18253317bacd006edcdde228f4970d8a4888289a79fb7794f56aa84551b811f.exe
Resource
win10v2004-20220812-en
General
-
Target
b18253317bacd006edcdde228f4970d8a4888289a79fb7794f56aa84551b811f
-
Size
78KB
-
MD5
7ab443048a87f5ab8add820245dc8560
-
SHA1
a64e20bcdf66c2d09189f2f8e2d2fdbbe164abb9
-
SHA256
b18253317bacd006edcdde228f4970d8a4888289a79fb7794f56aa84551b811f
-
SHA512
526a7193c9f07c0ef57bf70f0271ae8da07a03522975d55327c364ee035f12d1d1064f1bba611ac14d66015b08a25720dff8c3eaa083fc5171bff16b9b1fb59b
-
SSDEEP
1536:lVW7BUiBvL6BQ8Y+cimShv5gmyBJHH0P0iJaNygIepkg+fLoihW1wYUW7Nz:KFUOeZLhyBJerbgIepknGwK
Malware Config
Signatures
Files
-
b18253317bacd006edcdde228f4970d8a4888289a79fb7794f56aa84551b811f.exe windows x86
0b6ffb7d0b346e9346c57fd735864727
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
WaitForSingleObject
Sleep
CreateFileA
DeleteFileA
WriteFile
CreateMutexA
GetLastError
GetTempPathA
CloseHandle
GetModuleHandleA
GetStartupInfoA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA
msvcrt
sprintf
strcat
_mbsstr
strlen
printf
_mbscmp
??2@YAPAXI@Z
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
memset
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE