Static task
static1
Behavioral task
behavioral1
Sample
280b2b96053d993465afbb66d550ba5ef58663827738df6add82d3fd6c25ad4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
280b2b96053d993465afbb66d550ba5ef58663827738df6add82d3fd6c25ad4f.exe
Resource
win10v2004-20220812-en
General
-
Target
280b2b96053d993465afbb66d550ba5ef58663827738df6add82d3fd6c25ad4f
-
Size
361KB
-
MD5
5e3b8b6eecea1faeb69341692714c5ee
-
SHA1
f0c51edf52fde03622bbf7ad706344d36ba4592d
-
SHA256
280b2b96053d993465afbb66d550ba5ef58663827738df6add82d3fd6c25ad4f
-
SHA512
8843cfb5b0d613a0cc16b19ded3b7f4facb90c9f5c34dfaea5c892d9c4c2c9e65c5b3d416c9411d5d901208e01eac53840dd3f5a59134ab8ed9cec8e16f0bb1e
-
SSDEEP
6144:PYSHFGoEvY8ckSvUCkPJy+LI5f53z7L47/a3R5tmfaNKcdYHRnvGL4S9dEsSsdhu:wSHJEw9vUCkhFLI5B3z7L4+gqKef0V
Malware Config
Signatures
Files
-
280b2b96053d993465afbb66d550ba5ef58663827738df6add82d3fd6c25ad4f.exe windows x86
845b90c326879d69555a0ba51c26a490
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
StrChrIA
StrStrA
kernel32
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetModuleHandleA
GetTickCount
GetVersion
LoadResource
LockResource
RtlZeroMemory
urlmon
CoInternetCompareUrl
comctl32
GetMUILanguage
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE