Static task
static1
Behavioral task
behavioral1
Sample
75ef463c7b04f625684222b43069cef6e1e218b58e34ec1376e8dc14feb5721d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75ef463c7b04f625684222b43069cef6e1e218b58e34ec1376e8dc14feb5721d.exe
Resource
win10v2004-20220812-en
General
-
Target
75ef463c7b04f625684222b43069cef6e1e218b58e34ec1376e8dc14feb5721d
-
Size
391KB
-
MD5
98e263fe67ac7bce7718b70fa1c379c8
-
SHA1
c5e4987707dc0b0ee63906a477a6688109a67cf0
-
SHA256
75ef463c7b04f625684222b43069cef6e1e218b58e34ec1376e8dc14feb5721d
-
SHA512
67eb7d383195c1204565d36e583fd6011f2a297de51173ab43fbfdd834098d2cec3a87d65053e82a78bfb6442638135cae2241704f78c6891eab561fd217b33d
-
SSDEEP
12288:UAfZZ8Re5+PbaPYyhLT1zAiCqAOAZ1+jKzNmhlz:LfZC45+Pb2xZCaQ+hlz
Malware Config
Signatures
Files
-
75ef463c7b04f625684222b43069cef6e1e218b58e34ec1376e8dc14feb5721d.exe windows x86
b940214f6aab94ef9e337b4a4dfb90a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CreateFileMappingA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
DeleteFileA
CreateProcessW
SystemTimeToFileTime
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
GetLocalTime
GetLastError
GetFullPathNameA
GetFileAttributesA
GetEnvironmentVariableA
MultiByteToWideChar
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
FindClose
GetCurrentProcessId
WriteFile
CreateFileA
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetTempPathA
RaiseException
RtlUnwind
GetTickCount
TlsSetValue
HeapAlloc
TlsGetValue
TlsAlloc
GetProcessHeap
ExitProcess
GetStdHandle
GetCommandLineA
GetStartupInfoA
HeapFree
advapi32
ReportEventA
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
RegisterEventSourceA
shell32
ShellExecuteExW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ