Static task
static1
Behavioral task
behavioral1
Sample
677b70fde99fcc4ea73dd108b62d32b993fae6eb7903c283faaf749634f946bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
677b70fde99fcc4ea73dd108b62d32b993fae6eb7903c283faaf749634f946bb.exe
Resource
win10v2004-20220812-en
General
-
Target
677b70fde99fcc4ea73dd108b62d32b993fae6eb7903c283faaf749634f946bb
-
Size
53KB
-
MD5
110abcba1b1abe1a912d8a596ca0cdd6
-
SHA1
d99c7beebc27583303275da51d9a15f091a94171
-
SHA256
677b70fde99fcc4ea73dd108b62d32b993fae6eb7903c283faaf749634f946bb
-
SHA512
6524da42e093b41db2242a55a5c5972d88b1cc695c14fef336c8f9edb1b82ef8c15e62b82897049ea3752461019035aa5e9e0d7eda547d90f8061adb1c8301be
-
SSDEEP
768:Pia+6Z2NTBFcH7MwZGQhrbp930NScD05sUvPRnAGENSb9eqdlQCmtLdxxNx:ai2pYH7murdkY5sEnENOdGtNx
Malware Config
Signatures
Files
-
677b70fde99fcc4ea73dd108b62d32b993fae6eb7903c283faaf749634f946bb.exe windows x86
827381aab171066fc95bbb30ea3d221e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteConsoleA
GetStartupInfoA
GetEnvironmentVariableA
GetFileAttributesW
lstrlenA
SetLastError
GetModuleHandleA
EnumResourceTypesA
HeapDestroy
GetDriveTypeW
GetCommandLineA
GetTimeFormatW
DeleteFileA
GetCommandLineA
HeapCreate
GetConsoleTitleA
CreateEventW
CloseHandle
GlobalFlags
advapi32
InitializeSid
IsValidSid
IsValidSid
IsValidSecurityDescriptor
IsValidSid
IsValidSid
RegQueryValueW
IsValidAcl
RegCreateKeyExW
IsValidSid
CreateProcessAsUserW
RegDeleteValueA
RegEnumKeyA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE