Static task
static1
Behavioral task
behavioral1
Sample
d5a15578c8d1873cf75ca532beac51897e6b2f580d628991edbb25a484d4c623.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5a15578c8d1873cf75ca532beac51897e6b2f580d628991edbb25a484d4c623.exe
Resource
win10v2004-20220812-en
General
-
Target
d5a15578c8d1873cf75ca532beac51897e6b2f580d628991edbb25a484d4c623
-
Size
60KB
-
MD5
3c18fa459f1655dfc0fc566cbb084f9c
-
SHA1
a45e28a22277ceb38bf1e91bee4a41b86acc8357
-
SHA256
d5a15578c8d1873cf75ca532beac51897e6b2f580d628991edbb25a484d4c623
-
SHA512
538a4b65c11d7894aaa3d5d12f8475a9cde06fb18539884f27dbb38395769473f05e3663bed9d7bb88b3c3c1750face0a80e5478cac7696f80df67670a93d367
-
SSDEEP
768:7i/My0p89+zxEbjakT725yBFkQF3CXnf5+NODzu1QW1N41wMr9uygSCyslOgv07v:vzK9P3EA6cyXfBuyWcr9JgS2Ogs76ZQ
Malware Config
Signatures
Files
-
d5a15578c8d1873cf75ca532beac51897e6b2f580d628991edbb25a484d4c623.exe windows x86
1b7ca1033d6052d828a7a2243b66ed85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
DeleteFileA
CloseHandle
EnumResourceTypesA
GetCommandLineA
GlobalFlags
CloseHandle
CreateEventW
HeapDestroy
GetFileAttributesW
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
HeapCreate
GetDriveTypeW
lstrlenA
SetLastError
GetCommandLineA
GetConsoleTitleA
GetTimeFormatW
advapi32
IsValidSid
RegCreateKeyExW
IsValidSecurityDescriptor
RegQueryValueW
RegDeleteValueA
IsValidSid
IsValidSid
CreateProcessAsUserW
RegEnumKeyA
IsValidSid
InitializeSid
IsValidSid
IsValidAcl
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE