Static task
static1
Behavioral task
behavioral1
Sample
1db7b96b2c93399b95963a8594e89ca757788bc43cb3e4c350d7357b26616c08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1db7b96b2c93399b95963a8594e89ca757788bc43cb3e4c350d7357b26616c08.exe
Resource
win10v2004-20220812-en
General
-
Target
1db7b96b2c93399b95963a8594e89ca757788bc43cb3e4c350d7357b26616c08
-
Size
98KB
-
MD5
0fe5a46cd6ca71005c698b525634b700
-
SHA1
fdbb0b5e7bc1b3a95967816dd8efeaec4b89c2a5
-
SHA256
1db7b96b2c93399b95963a8594e89ca757788bc43cb3e4c350d7357b26616c08
-
SHA512
f0b24747fd3c184007ebb9ad45eb76e0dac685a4844cb40c1d265083ddb41fe1a39bdbd43895108aa645b6c532d9cdb8056acfa1973458dc0d49a3eba6e5837c
-
SSDEEP
768:Pcatsv4OwO7PFPrXWWX90LsJ7sJWl8+1avyTRYw/aTR847KVwKpAn5rhN:jsvbfJrGCdVsM8+16kaO47KVwKSnT
Malware Config
Signatures
Files
-
1db7b96b2c93399b95963a8594e89ca757788bc43cb3e4c350d7357b26616c08.exe windows x86
d1c804558bc39d46fdc98ff46ae9856d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollPos
CopyImage
advapi32
RegDeleteValueW
RegDeleteKeyA
RegEnumValueW
kernel32
DeleteFileW
lstrcatA
DeleteFileA
ReadFile
ExitThread
GetFileType
WriteFile
GetCPInfo
OpenFile
CompareStringA
CreateDirectoryA
FreeResource
FormatMessageA
GetLocalTime
GetCommandLineA
CopyFileExA
HeapFree
CopyFileA
HeapAlloc
GetFileTime
FlushFileBuffers
lstrlenA
Sections
.7b00 Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.8639f Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f4d69 Size: 57KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a4f6d Size: 1024B - Virtual size: 743B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ