Static task
static1
Behavioral task
behavioral1
Sample
317a2262f260430634fe9bffd70a27705f8c03f92dc4bb82deec65f0a4ae07c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
317a2262f260430634fe9bffd70a27705f8c03f92dc4bb82deec65f0a4ae07c9.exe
Resource
win10v2004-20220812-en
General
-
Target
317a2262f260430634fe9bffd70a27705f8c03f92dc4bb82deec65f0a4ae07c9
-
Size
87KB
-
MD5
07bfc3af3f517d37650806bc746126ad
-
SHA1
dac3e92cf1d246bf08dba60633985595e4fe77cc
-
SHA256
317a2262f260430634fe9bffd70a27705f8c03f92dc4bb82deec65f0a4ae07c9
-
SHA512
35b786c7b2c5cd919fa9770667fee04e9ef9903f8f71e1526f4b47d6667ad713b9d9479e89a0433d3dd149f286a41868165142efb258442a4d2b3a6ba2ddfa5b
-
SSDEEP
1536:nWzK9P3EA6cyXfBuyWcr9JgS2Ogs76ZQ:WY3EDbW0yS2q6ZQ
Malware Config
Signatures
Files
-
317a2262f260430634fe9bffd70a27705f8c03f92dc4bb82deec65f0a4ae07c9.exe windows x86
1b7ca1033d6052d828a7a2243b66ed85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
DeleteFileA
CloseHandle
EnumResourceTypesA
GetCommandLineA
GlobalFlags
CloseHandle
CreateEventW
HeapDestroy
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
HeapCreate
GetDriveTypeW
lstrlenA
SetLastError
GetCommandLineA
GetConsoleTitleA
GetTimeFormatW
advapi32
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteValueA
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidAcl
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcflyya Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE