Static task
static1
Behavioral task
behavioral1
Sample
c548c010f4fc9eb022b3bb153b725aa384614baeedcf5f044181a1811bbfda08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c548c010f4fc9eb022b3bb153b725aa384614baeedcf5f044181a1811bbfda08.exe
Resource
win10v2004-20220812-en
General
-
Target
c548c010f4fc9eb022b3bb153b725aa384614baeedcf5f044181a1811bbfda08
-
Size
58KB
-
MD5
b17c8c91c04dd363ae9072b7003d05dd
-
SHA1
0d4228cd40522e7b144ab0442e038f7984a6fe11
-
SHA256
c548c010f4fc9eb022b3bb153b725aa384614baeedcf5f044181a1811bbfda08
-
SHA512
8f14a0949574a2d6a85fa683f5da863118308eb07f17665e6dc1da8412aa029817f1c5c863f743b9aed3394d45fca355e29ee263193dc06c706d7bd0260f411e
-
SSDEEP
1536:4JlSbrFrNxsqi+lzcg43Mx9BwMmTvtVpiu:4JAdjfimYg643wRbX
Malware Config
Signatures
Files
-
c548c010f4fc9eb022b3bb153b725aa384614baeedcf5f044181a1811bbfda08.exe windows x86
fcd16daa75103e18a29936749a20aec8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetModuleHandleW
SetEnvironmentVariableA
DeleteFileA
SetFilePointer
DeleteFileA
GetProcessHeap
GetConsoleAliasW
GetShortPathNameW
CreateFileMappingW
HeapFree
GetStringTypeW
GetModuleHandleA
DeleteFileA
CreateMailslotW
GetExitCodeProcess
Heap32Next
WriteConsoleW
GetVersion
GetStringTypeW
HeapCreate
GetConsoleTitleA
SetCurrentDirectoryA
mstscax
DllCanUnloadNow
DllGetTscCtlVer
DllUnregisterServer
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ