Static task
static1
Behavioral task
behavioral1
Sample
362bff71c872ec66ebcb5151c99e76e907106abeb250d1e36d65fdd8f3e9cbff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
362bff71c872ec66ebcb5151c99e76e907106abeb250d1e36d65fdd8f3e9cbff.exe
Resource
win10v2004-20220812-en
General
-
Target
362bff71c872ec66ebcb5151c99e76e907106abeb250d1e36d65fdd8f3e9cbff
-
Size
148KB
-
MD5
a0915252b40bfb74ba7a05aa3fe00252
-
SHA1
b6452b446be571b42ab627783db34b839d064999
-
SHA256
362bff71c872ec66ebcb5151c99e76e907106abeb250d1e36d65fdd8f3e9cbff
-
SHA512
09cb3781bd54bfeb25bb2a117129e0a26112fd4a95fcfab0f03516c60367dd14ff27857721147c2b64d99e8642a07b293be6277131464ffeae2c4e4ab18423d9
-
SSDEEP
3072:kcgu3m6qPql4zq0vI0ue5UaRETjHFYCfnFcViVtp3a2AId8gpFtR6Io5RTk:1gu2qAqgCeyaGzLvuYaW8SFsHI
Malware Config
Signatures
Files
-
362bff71c872ec66ebcb5151c99e76e907106abeb250d1e36d65fdd8f3e9cbff.exe windows x86
04c9dad1102153696a563b0724502821
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA
msvcrt
strrchr
tmpnam
wcsspn
strcspn
wcstombs
Sections
.flat Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE