Static task
static1
Behavioral task
behavioral1
Sample
b0d5cd0dfb5822df6a492d4d957d3c6e208d6417ac21fc75d6c9d90a5038a27b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0d5cd0dfb5822df6a492d4d957d3c6e208d6417ac21fc75d6c9d90a5038a27b.exe
Resource
win10v2004-20220812-en
General
-
Target
b0d5cd0dfb5822df6a492d4d957d3c6e208d6417ac21fc75d6c9d90a5038a27b
-
Size
25KB
-
MD5
0dbf05ce288e2f5b2a93772ed83554ad
-
SHA1
19cdcc4dd5d75cd4c4881001b5f3a8b37532c526
-
SHA256
b0d5cd0dfb5822df6a492d4d957d3c6e208d6417ac21fc75d6c9d90a5038a27b
-
SHA512
39e55c7a7bd41fb2640f4064bfdf3f3aa4aab3f06b01b8704489dd20ea22239bc8dd588c2e08f2d0bb339ec0b8e98ab1a2db4931be884f49b55b2963926dd7e1
-
SSDEEP
384:ZbHlFyspLw288vlWK9kSj3kUMHcJwzrBt73yQXJ4XqSU9ijR8kZ1iEFI8:5FFTJw8912STkuwz/ivU9i18kZ1ip8
Malware Config
Signatures
Files
-
b0d5cd0dfb5822df6a492d4d957d3c6e208d6417ac21fc75d6c9d90a5038a27b.exe windows x86
cfa65dedd9fb621da68094f57507d60c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll �
CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA
shell32.dll.
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE