Static task
static1
Behavioral task
behavioral1
Sample
b36c5d07a53cd5c02d11f0bcaae03b998d43000fa72aa0d9130410e40fc4adb5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b36c5d07a53cd5c02d11f0bcaae03b998d43000fa72aa0d9130410e40fc4adb5.exe
Resource
win10v2004-20220812-en
General
-
Target
b36c5d07a53cd5c02d11f0bcaae03b998d43000fa72aa0d9130410e40fc4adb5
-
Size
40KB
-
MD5
6e845eed0b4055d30c0fa598328f5dcc
-
SHA1
bec9ae11f0461be01d014b9d7360d0866b2938c6
-
SHA256
b36c5d07a53cd5c02d11f0bcaae03b998d43000fa72aa0d9130410e40fc4adb5
-
SHA512
8751a71548f0b62caa98754fa40e130bf9622501a1d5d64384c1bfd1c2ad0ad239414b790b56a28501a0790b0c50374745f79fa645176e3cc4ea6dcdf106ac01
-
SSDEEP
768:h2znCwDg+ILr96gLZmjzYnP7RhRvxKq2Y1rqI:UxU4iKEFXvxKqHs
Malware Config
Signatures
Files
-
b36c5d07a53cd5c02d11f0bcaae03b998d43000fa72aa0d9130410e40fc4adb5.exe windows x86
bdbeda4d7d0a4122e3fa4bde31c73ae5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
ShellExecuteA
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_access
_controlfp
_acmdln
exit
_XcptFilter
_exit
strstr
memset
strchr
strcat
fopen
fprintf
fclose
strrchr
strcpy
__p__fmode
_except_handler3
kernel32
GetModuleHandleA
GetStartupInfoA
CreateProcessA
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
SetCurrentDirectoryA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ