Static task
static1
Behavioral task
behavioral1
Sample
80068bd39f8e2c0b4415b9e1251cc59d0e0fa3db68bb53e1597ec30ff9189045.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
80068bd39f8e2c0b4415b9e1251cc59d0e0fa3db68bb53e1597ec30ff9189045.exe
Resource
win10v2004-20220812-en
General
-
Target
80068bd39f8e2c0b4415b9e1251cc59d0e0fa3db68bb53e1597ec30ff9189045
-
Size
100KB
-
MD5
0c885a17a2beceacd9a27294e8ffe526
-
SHA1
3c8cc153d2588ae4b87b472aee5d2bab7ba96b61
-
SHA256
80068bd39f8e2c0b4415b9e1251cc59d0e0fa3db68bb53e1597ec30ff9189045
-
SHA512
8343da2c3969a985211a0bbda409a598d6da17d74bcfdb5662e27f2b75d88982b29805d9b930c99187f8ffbd9a314d14f94854f9e73a56761a7817a817ae2573
-
SSDEEP
1536:RgIZ4wO3/29U6AoEIbc+aScr4XpudoY9tYHiQWFZKh+Kb:eQUBdoEIbxcrxtYHR5tb
Malware Config
Signatures
Files
-
80068bd39f8e2c0b4415b9e1251cc59d0e0fa3db68bb53e1597ec30ff9189045.exe windows x86
90b3bbb19d2417393487b3a3dc2bd74d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sleep
GetModuleFileNameA
CopyFileA
CloseHandle
SetFileTime
GetFileTime
SetFileAttributesA
GetFileAttributesA
LCMapStringA
SetEndOfFile
GetLastError
MoveFileA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
HeapFree
ReadFile
TerminateProcess
GetCurrentProcess
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
FlushFileBuffers
VirtualAlloc
HeapReAlloc
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LCMapStringW
shell32
ShellExecuteA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE