Static task
static1
Behavioral task
behavioral1
Sample
5a6f55f868c7fb65c7ce233e3afaeac8a2f54326c8e31f0c7788a970db767200.exe
Resource
win7-20220812-en
General
-
Target
5a6f55f868c7fb65c7ce233e3afaeac8a2f54326c8e31f0c7788a970db767200
-
Size
164KB
-
MD5
42fa7c4445d10cd0608d93f0459a7b50
-
SHA1
819f6372597034d4be5b4de91e3fd868304a83d6
-
SHA256
5a6f55f868c7fb65c7ce233e3afaeac8a2f54326c8e31f0c7788a970db767200
-
SHA512
5a0715bf4276d1f4a3755ae9d9729d4ed11e43fcba89397f11c5940019cda7cedf5b2ceea2180abc79d204e1b0d2baf6005106bfd906125ce722b5590890047a
-
SSDEEP
3072:gpMgfymxK0+1w+VNdjd810OUO5IfDzluOTolewZGEfAxe:gppffxFB+VhOb5enluOolnsEfke
Malware Config
Signatures
Files
-
5a6f55f868c7fb65c7ce233e3afaeac8a2f54326c8e31f0c7788a970db767200.exe windows x86
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE