Static task
static1
Behavioral task
behavioral1
Sample
991b1c47562b87b724d1619a06092c6e2be21afa79c5206984fb324623a82138.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
991b1c47562b87b724d1619a06092c6e2be21afa79c5206984fb324623a82138.exe
Resource
win10v2004-20220901-en
General
-
Target
991b1c47562b87b724d1619a06092c6e2be21afa79c5206984fb324623a82138
-
Size
1.6MB
-
MD5
6bd3ea46c62e135af66204b5af6fc4f7
-
SHA1
7aaa0b99590ab0d313cacfb839ee98bb6f3c3ec6
-
SHA256
991b1c47562b87b724d1619a06092c6e2be21afa79c5206984fb324623a82138
-
SHA512
17839013a04ea0617a6bbf0c28b7c80c1dbe35ecdf11786a82dc25f52e875d7a231d58270975861ded900df35c30c3c070ec61486b74123a34798d392521cace
-
SSDEEP
24576:7WvpAh/Xoz6hTNNo5wlHoPraAzRaZxy6tbxzCOlaA86JswTbJFSV3uWK34KiOnDy:76pElxNovmAzRarDbEOgiSsJFPf18dd
Malware Config
Signatures
Files
-
991b1c47562b87b724d1619a06092c6e2be21afa79c5206984fb324623a82138.exe windows x86
8a84fce4b8bd310a91e140c416d4194f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExW
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
memcpy
free
malloc
wcscmp
memcmp
memmove
printf
strlen
wcslen
wcscpy
wcscat
memset
_controlfp
kernel32
SetFilePointer
WriteFile
ReadFile
CreateFileW
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindFirstFileW
FindClose
SetConsoleCtrlHandler
GetModuleFileNameW
GetCommandLineW
GetTempPathW
GetCurrentThreadId
GetTickCount
GetCurrentProcessId
CreateDirectoryW
GetLastError
SetFileTime
SetFileAttributesW
CreateProcessW
CloseHandle
WaitForSingleObject
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ