Static task
static1
Behavioral task
behavioral1
Sample
070f5efe3b5f2ea8f3ce718c1a80d06b51c16d1c84b21b0bd64c5977db33974b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
070f5efe3b5f2ea8f3ce718c1a80d06b51c16d1c84b21b0bd64c5977db33974b.exe
Resource
win10v2004-20220812-en
General
-
Target
070f5efe3b5f2ea8f3ce718c1a80d06b51c16d1c84b21b0bd64c5977db33974b
-
Size
50KB
-
MD5
9378103caa0ec3cba38a498fc79bcdc0
-
SHA1
43e8c7afa3dec2e36140d1287276b231c57b908d
-
SHA256
070f5efe3b5f2ea8f3ce718c1a80d06b51c16d1c84b21b0bd64c5977db33974b
-
SHA512
888253e15a1fbac84aaab1a02cb841262bd5549f56e277c75c23c089895aa93d7572fc895a85a245650a5bac16dd8516694e0bb925fe4e73e6752242f57da9fe
-
SSDEEP
1536:jfDWUwGgu5XEAbv9NYtnnZAluxhTNnO9TU:j6IV502NYtmluXE9TU
Malware Config
Signatures
Files
-
070f5efe3b5f2ea8f3ce718c1a80d06b51c16d1c84b21b0bd64c5977db33974b.exe windows x86
5699c889b00a532becaa132bec9674b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
FlushViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
Sleep
DeleteFileA
TerminateProcess
OpenProcess
WinExec
GetCurrentProcessId
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA
shell32
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
msvcrt
_onexit
__dllonexit
_controlfp
time
_mbsupr
sprintf
_ltoa
atoi
_mbsrchr
_except_handler3
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
rpcrt4
UuidToStringA
UuidCreate
RpcStringFreeA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ