Static task
static1
Behavioral task
behavioral1
Sample
783f3ad49ba8de049caa788015471439cb750f3e8c6141a21cdb56ff16499d3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
783f3ad49ba8de049caa788015471439cb750f3e8c6141a21cdb56ff16499d3a.exe
Resource
win10v2004-20220812-en
General
-
Target
783f3ad49ba8de049caa788015471439cb750f3e8c6141a21cdb56ff16499d3a
-
Size
300KB
-
MD5
c8e3183efb6a5fdbad0f88c6c03d6a8b
-
SHA1
5ce08914dd77668be2a91aaad9be51459c598294
-
SHA256
783f3ad49ba8de049caa788015471439cb750f3e8c6141a21cdb56ff16499d3a
-
SHA512
b46127ec4b0b0637e330549d10afe5896846acd321698a4efd9cf2a8bd62cce365ead1c30abf279ed1bcc4807aad5c60c3ee355fd8144f014baea5646710aa8c
-
SSDEEP
6144:DrCuRAtfgvIZDe6w/JwHdZHdV/pfdJXFnpAQTNWIOJh8:DrZAlfZyuHdJdV/BXFnpzBWr8
Malware Config
Signatures
Files
-
783f3ad49ba8de049caa788015471439cb750f3e8c6141a21cdb56ff16499d3a.exe windows x86
b8c6adf90e4df97067d5e4ce131e044d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetModuleHandleA
SuspendThread
lstrcmpiA
GetStdHandle
lstrcmpiA
lstrcmpiA
GetLogicalDriveStringsA
FileTimeToLocalFileTime
Sleep
GetProcessHeap
GetVolumePathNameA
IsValidLocale
HeapCreate
DeleteFileA
CreateMailslotA
CreateNamedPipeA
GetModuleFileNameA
GetDriveTypeW
lstrcmpiA
SetLastError
lstrlenA
WaitForSingleObject
scecli
SceSysPrep
SceOpenPolicy
DeltaNotify
InitializeChangeNotify
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 291KB - Virtual size: 290KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ