Static task
static1
Behavioral task
behavioral1
Sample
0d11aafd65466135435e33ce33dc57badd7186dc08913e4e63093471dcc411e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d11aafd65466135435e33ce33dc57badd7186dc08913e4e63093471dcc411e7.exe
Resource
win10v2004-20220812-en
General
-
Target
0d11aafd65466135435e33ce33dc57badd7186dc08913e4e63093471dcc411e7
-
Size
668KB
-
MD5
0dd181e5679fd2fda3569db1aee5dc60
-
SHA1
61001affe47bef640de681efcdba6b2166626929
-
SHA256
0d11aafd65466135435e33ce33dc57badd7186dc08913e4e63093471dcc411e7
-
SHA512
df70e9f6bbed1cd8e4f791f4a9495025e36c92559904d228a203aa072b36ffabf0e5469ed73ece4e02f1f3916dc46856d46cc24d5368e2a0de83b45674065e1a
-
SSDEEP
12288:lhJMfRUpYKXZxAnM30c8sGDGnwgWhkBRDIuIivlPzzUKC1gv7Vw0:7WpUTZxA20c8sFnwgd1zUpgzC0
Malware Config
Signatures
Files
-
0d11aafd65466135435e33ce33dc57badd7186dc08913e4e63093471dcc411e7.exe windows x86
8a84fce4b8bd310a91e140c416d4194f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExW
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
memcpy
free
malloc
wcscmp
memcmp
memmove
printf
strlen
wcslen
wcscpy
wcscat
memset
_controlfp
kernel32
SetFilePointer
WriteFile
ReadFile
CreateFileW
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindFirstFileW
FindClose
SetConsoleCtrlHandler
GetModuleFileNameW
GetCommandLineW
GetTempPathW
GetCurrentThreadId
GetTickCount
GetCurrentProcessId
CreateDirectoryW
GetLastError
SetFileTime
SetFileAttributesW
CreateProcessW
CloseHandle
WaitForSingleObject
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ