Static task
static1
Behavioral task
behavioral1
Sample
799ab54f38ac286e6f717123647b1043e7242955bc87c5b9c71c5a4708646152.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
799ab54f38ac286e6f717123647b1043e7242955bc87c5b9c71c5a4708646152.exe
Resource
win10v2004-20220901-en
General
-
Target
799ab54f38ac286e6f717123647b1043e7242955bc87c5b9c71c5a4708646152
-
Size
76KB
-
MD5
002612cbd683482debb24de3f58e49e0
-
SHA1
fd411283e1df138e3a4fc05e7b8344cc8ecab68e
-
SHA256
799ab54f38ac286e6f717123647b1043e7242955bc87c5b9c71c5a4708646152
-
SHA512
84d83418322982c0f6d8c8f1cb1db7cf9f4794f3ab256194a5c2e13bba9f8c8072baabd6d77e49cfc65a42515be79ce18594748da36e0d168a67b54a6ffc7e08
-
SSDEEP
1536:cjVGSOD8clfmOZN2DZhAD8GXN+I7fJ+aCl1fe6:qM8clD2DZizoI7h+aS1G6
Malware Config
Signatures
Files
-
799ab54f38ac286e6f717123647b1043e7242955bc87c5b9c71c5a4708646152.exe windows x86
0801a8fa3640622d9d8ce9bb96cabd55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileA
MoveFileA
lstrlenA
CloseHandle
TerminateProcess
WaitForSingleObject
OpenProcess
GetSystemInfo
VirtualProtect
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
SetStdHandle
GetLocaleInfoA
FlushFileBuffers
user32
MessageBoxA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE