Static task
static1
Behavioral task
behavioral1
Sample
75b1ea7c51ecac0bbe40e346d862d2cac01b6299a8322091372bb2262d56620a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75b1ea7c51ecac0bbe40e346d862d2cac01b6299a8322091372bb2262d56620a.exe
Resource
win10v2004-20220901-en
General
-
Target
75b1ea7c51ecac0bbe40e346d862d2cac01b6299a8322091372bb2262d56620a
-
Size
16KB
-
MD5
75307444ed3d28039dbd4a76683c6003
-
SHA1
8bd3b94ae51e202339648b81ccbe493c6308c875
-
SHA256
75b1ea7c51ecac0bbe40e346d862d2cac01b6299a8322091372bb2262d56620a
-
SHA512
d04c6a3452e61f3f9c8f53ef6c5841774c4ea0c62e1fcc79212a55704c7758672daacb7a7841005c2de13d2f82b41af6a995696460c1e36cfd108c4303b97cbb
-
SSDEEP
384:5gxF8lNW0ax/F82+rrYTCirMxR1vHkFVzF4xm:5gztj3+bWMPmB
Malware Config
Signatures
Files
-
75b1ea7c51ecac0bbe40e346d862d2cac01b6299a8322091372bb2262d56620a.exe windows x86
7657ec3df70fc3da4828ab7a0bc5e2ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegOpenKeyExA
RegCloseKey
shlwapi
StrStrA
kernel32
lstrlenA
lstrcpyA
ExitProcess
GetLastError
CopyFileA
CloseHandle
WriteFile
ReadFile
OpenFile
SetFileAttributesA
lstrcmpiA
GetFileAttributesA
lstrcpynA
lstrcatA
GetWindowsDirectoryA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
CreateToolhelp32Snapshot
SizeofResource
LoadResource
FindResourceA
CreateProcessA
DeleteFileA
Sleep
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeThread
FreeLibrary
WaitForSingleObject
LoadLibraryA
OpenProcess
GetVersion
LockResource
GetCommandLineA
DuplicateHandle
VirtualAllocEx
CreateRemoteThread
SetLastError
user32
CharUpperA
shell32
ShellExecuteExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ