Static task
static1
Behavioral task
behavioral1
Sample
d68beb007ff50dbed51ac444c6b753db9c5dcf6a4b3ad99bf84246aa1687503e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d68beb007ff50dbed51ac444c6b753db9c5dcf6a4b3ad99bf84246aa1687503e.exe
Resource
win10v2004-20220812-en
General
-
Target
d68beb007ff50dbed51ac444c6b753db9c5dcf6a4b3ad99bf84246aa1687503e
-
Size
29KB
-
MD5
83c61022e01c7026b92dac42dc83a83d
-
SHA1
3396e947689122e5ce7c3ebad4f61c47bc6f68b0
-
SHA256
d68beb007ff50dbed51ac444c6b753db9c5dcf6a4b3ad99bf84246aa1687503e
-
SHA512
58d75878d6915255430bcd5b8ffb04777d6a73012f23a691f8785c727060cfd92f4e1d3d1441335bc0116346523f47f4825fdda12bde5c0f2a5f990f49f5d3e3
-
SSDEEP
384:XltlqdHX6yjJsugzW7gocBwWnHhejcjUdJIrg+LPgHanBYA7+fLITB:XlTG36mJY0gocXnBpjUZsYVTf0T
Malware Config
Signatures
Files
-
d68beb007ff50dbed51ac444c6b753db9c5dcf6a4b3ad99bf84246aa1687503e.exe windows x86
ff9fc51c365b07c626abe5cccf273fc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatus
lstrlenA
Sleep
lstrcatA
FindClose
FindFirstFileA
lstrcpyA
GetModuleFileNameA
SetFileTime
LockResource
LoadResource
FindResourceA
GetFileTime
CloseHandle
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetShortPathNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
user32
wsprintfA
shell32
SHGetSpecialFolderPathA
msvcrt
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
strstr
exit
Sections
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE