Static task
static1
Behavioral task
behavioral1
Sample
659d5d59cfcabd6492c8cc7131c1c759032a80aa5aab505351774ace48292249.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
659d5d59cfcabd6492c8cc7131c1c759032a80aa5aab505351774ace48292249.exe
Resource
win10v2004-20221111-en
General
-
Target
659d5d59cfcabd6492c8cc7131c1c759032a80aa5aab505351774ace48292249
-
Size
16KB
-
MD5
23521dc7e4a67f7c6345a0044641c598
-
SHA1
5b6a238c3f47e7d0ce4cad25754e44193d056174
-
SHA256
659d5d59cfcabd6492c8cc7131c1c759032a80aa5aab505351774ace48292249
-
SHA512
56c8e892186c1cbb22cbd66c94e0d0900004dccf6d70d647b52a15e5de72ccf5d84a9ce136fd0f1f9635e521ccdf7fbd66867bb9889ea01978d7fcd71db10f16
-
SSDEEP
192:ERXrvuF4XQh5NMTDNuXV2DnnnLbxvoR/romQp3177T5F/EC7SI0qOvvv+Keh0/0:GFA7NoUALnP9WQr7/0Iy3+pys
Malware Config
Signatures
Files
-
659d5d59cfcabd6492c8cc7131c1c759032a80aa5aab505351774ace48292249.exe windows x86
17e1240dca697ef23b78b63f5c01523d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetWindowsDirectoryA
CreateFileA
GetProcessHeap
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
RegOpenKeyExA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ