Static task
static1
Behavioral task
behavioral1
Sample
07b4c86d9746f575db0bb1a15ca2590e995f3af6971ad5274c405ef314aec670.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
07b4c86d9746f575db0bb1a15ca2590e995f3af6971ad5274c405ef314aec670.exe
Resource
win10v2004-20221111-en
General
-
Target
07b4c86d9746f575db0bb1a15ca2590e995f3af6971ad5274c405ef314aec670
-
Size
53KB
-
MD5
057434c71517aa3574d6dac61e298540
-
SHA1
b9afadc12aa2d7376f55b3c1d0e8f5e0d327827a
-
SHA256
07b4c86d9746f575db0bb1a15ca2590e995f3af6971ad5274c405ef314aec670
-
SHA512
5210a947c01daca70bdb0587fe8d30c254c3272c007ed435bac47b489c57c56563d785265c94cc0cbb54586c41eeb94fc601879cbe1bb57ebe0aa4b370da3eca
-
SSDEEP
1536:GYH7murdkY5sgxhsvDbqjp7FsxoY7HPC:lRrdkCsgHabqJFuo2H
Malware Config
Signatures
Files
-
07b4c86d9746f575db0bb1a15ca2590e995f3af6971ad5274c405ef314aec670.exe windows x86
f73b61d15392a4be49dd7ae0ff1063a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetLastError
GlobalFlags
HeapCreate
CreateEventW
GetConsoleTitleA
GetFileAttributesW
lstrlenA
DeleteFileA
GetTimeFormatW
HeapDestroy
GetCommandLineA
WriteConsoleA
GetCommandLineA
CloseHandle
GetDriveTypeW
CloseHandle
GetEnvironmentVariableA
GetStartupInfoA
EnumResourceTypesA
advapi32
IsValidSid
IsValidSid
CreateProcessAsUserW
IsValidSid
IsValidAcl
InitializeSid
IsValidSecurityDescriptor
IsValidSid
RegQueryValueW
IsValidSid
RegDeleteValueA
RegCreateKeyExW
RegEnumKeyA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nwavkyp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE