Static task
static1
Behavioral task
behavioral1
Sample
b2ca7fd155d29fe2781842d7b5052bf14444f1b8942ccda16091677839678665.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2ca7fd155d29fe2781842d7b5052bf14444f1b8942ccda16091677839678665.exe
Resource
win10v2004-20220812-en
General
-
Target
b2ca7fd155d29fe2781842d7b5052bf14444f1b8942ccda16091677839678665
-
Size
5KB
-
MD5
bcc5132fa43ad481f80e5a67d7a1205c
-
SHA1
650a5f543973e48043df4763fa465eebb4d49201
-
SHA256
b2ca7fd155d29fe2781842d7b5052bf14444f1b8942ccda16091677839678665
-
SHA512
301c33b4e1bf785b866a0f7659e2b89114b1eb0cd17748f28ce2b964b638c04f2258c89a0667737f872d857e65a84165bedfb98892cf5d61cd90abfd226e4085
-
SSDEEP
96:qQSm0bpf/ShKPhcFyRKD+Yl2r3m/RhKaCuUrdWKEKZGxzm68s4pYuW:qvm0FrSyRK6pj0RhbkcnmJrPpM
Malware Config
Signatures
Files
-
b2ca7fd155d29fe2781842d7b5052bf14444f1b8942ccda16091677839678665.exe windows x64
ffae1d8cafe7edbd0014d3b19776221f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ntdll
memset
shlwapi
StrStrIW
shell32
ShellExecuteExW
ole32
CoGetObject
Sections
.MPRESS1 Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE