Static task
static1
Behavioral task
behavioral1
Sample
c1f484e3c4dba690c1602661a195bcfc0a9125d7d3246d924cc30d2a478a1e5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1f484e3c4dba690c1602661a195bcfc0a9125d7d3246d924cc30d2a478a1e5c.exe
Resource
win10v2004-20221111-en
General
-
Target
c1f484e3c4dba690c1602661a195bcfc0a9125d7d3246d924cc30d2a478a1e5c
-
Size
3KB
-
MD5
357a191fe8e02a780e77f14f250b4156
-
SHA1
00e2453bd9eb9274fcff90480cca695753be2f55
-
SHA256
c1f484e3c4dba690c1602661a195bcfc0a9125d7d3246d924cc30d2a478a1e5c
-
SHA512
eedc3ef4b955460ecc2513b321f3ce2766584003f573fb93d2c48c4ae0bdbf3df23e0d36b70b06089f42fefb1251a318986016916eeaffb26b9f32783acb6c99
Malware Config
Signatures
Files
-
c1f484e3c4dba690c1602661a195bcfc0a9125d7d3246d924cc30d2a478a1e5c.exe windows x86
9eeefa7f6cdca34a42a6c3913e8fb403
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetTempFileNameW
FreeResource
FindResourceW
LoadResource
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
LockResource
lstrcatW
CloseHandle
shell32
SHFileOperationW
shlwapi
StrChrW
StrRChrW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
memmove
memset
Sections
pe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 688B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ