Static task
static1
Behavioral task
behavioral1
Sample
7596afaf103c13f8b36fc640bf6ec2e5d540758b8c6a585f7824748aa8432399.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7596afaf103c13f8b36fc640bf6ec2e5d540758b8c6a585f7824748aa8432399.exe
Resource
win10v2004-20220901-en
General
-
Target
7596afaf103c13f8b36fc640bf6ec2e5d540758b8c6a585f7824748aa8432399
-
Size
94KB
-
MD5
081760ae1301a3b3270fad07ae2b48a8
-
SHA1
babe4a85869b615472f578e9a3e1e809b6f21155
-
SHA256
7596afaf103c13f8b36fc640bf6ec2e5d540758b8c6a585f7824748aa8432399
-
SHA512
db3fa56857f2b8aeed95e6906a249bc9fa72bfc450f04c8bd3a57a96a251db3b9f23f9661ff02ef04c32048292857345517de1af5dc18be1103196cf2af424a7
-
SSDEEP
1536:ZoflOgrVSfW3s5+m+MkMIi5nVI3B01OgrVSfW3s5B:ZoflOgMfgs5+Ef95V+a1OgMfgs5B
Malware Config
Signatures
Files
-
7596afaf103c13f8b36fc640bf6ec2e5d540758b8c6a585f7824748aa8432399.exe windows x86
4840fed75f3ec84e295f96ca41897373
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetCurrentProcess
DuplicateHandle
SizeofResource
CopyFileA
GetModuleFileNameA
LoadResource
CreateFileA
WriteFile
CloseHandle
CreateProcessA
Sleep
OpenProcess
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
msvcrt
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strrev
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ