Static task
static1
Behavioral task
behavioral1
Sample
51cbdecff5ec2b0168e6cbb540a79faf2a4e1823a7a4267d531e95feec522c67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51cbdecff5ec2b0168e6cbb540a79faf2a4e1823a7a4267d531e95feec522c67.exe
Resource
win10v2004-20220812-en
General
-
Target
51cbdecff5ec2b0168e6cbb540a79faf2a4e1823a7a4267d531e95feec522c67
-
Size
45KB
-
MD5
50cac2c8ffdb7d35b5bf4bcfa35d159c
-
SHA1
d3b47f1cf87421ce173b0ae60e81cb1cecea3485
-
SHA256
51cbdecff5ec2b0168e6cbb540a79faf2a4e1823a7a4267d531e95feec522c67
-
SHA512
ab7b659fad4a1f8731382ecdf732724fc0f8778c2214c6f804a684f486b6686e130a6a27c682494eb3520837cb4b2ffb682d7620e7c8db6d77dc3f3ed36d6f5e
-
SSDEEP
192:6cNhCefrVvNzFCTr312vkWl92NGossJ608MC:68HfrVFaZ3i2MosK6dd
Malware Config
Signatures
Files
-
51cbdecff5ec2b0168e6cbb540a79faf2a4e1823a7a4267d531e95feec522c67.exe windows x86
11230e9744c56754480a43b992118932
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
GetLastError
LocalAlloc
InterlockedExchange
RaiseException
FreeLibrary
user32
wsprintfA
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
strchr
_stricmp
rpcrt4
UuidCreateSequential
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ