Static task
static1
Behavioral task
behavioral1
Sample
c587c9947e086f7ab75b3c98f0b86996587a7b1ddcaa32ce086acaf4f1f19b30.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c587c9947e086f7ab75b3c98f0b86996587a7b1ddcaa32ce086acaf4f1f19b30.exe
Resource
win10v2004-20220812-en
General
-
Target
c587c9947e086f7ab75b3c98f0b86996587a7b1ddcaa32ce086acaf4f1f19b30
-
Size
173KB
-
MD5
846f64e972db5b0a059269c7906bbe21
-
SHA1
8eec0ca331b1d8db3a195e9d0941ef28032f1d85
-
SHA256
c587c9947e086f7ab75b3c98f0b86996587a7b1ddcaa32ce086acaf4f1f19b30
-
SHA512
07d60b19ab77a546ab36e97324da59a1be96d99caa4dbc49f2cb14af7056a4db5ca65d4df15516ca805866f67df56d363b195ed7b20e3e750c30082942131bbe
-
SSDEEP
1536:7jr2ZG9yDlP3EUwXkmdo+TLMLGahwpkeLd4gIgem23BU58Nyr3QinTvS3H0rt:ByDlvE/pdz2GpkeLd4gnT2xUrhTvd
Malware Config
Signatures
Files
-
c587c9947e086f7ab75b3c98f0b86996587a7b1ddcaa32ce086acaf4f1f19b30.exe windows x86
3d1ad0758ae3cc8033761a4914edee6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GetFileType
ExitProcess
lstrcmpA
DeleteFileA
DeleteFileW
WriteFile
FindClose
HeapAlloc
FlushFileBuffers
CopyFileA
FormatMessageA
GetLocalTime
GetStdHandle
lstrlenA
lstrcatA
GetLastError
CopyFileExA
advapi32
RegCreateKeyExW
RegQueryValueExA
RegQueryInfoKeyA
RegDeleteKeyW
RegGetKeySecurity
RegOpenKeyExA
RegEnumValueA
RegQueryValueA
user32
GetCursor
GetScrollInfo
Sections
.0d71h Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.0ch1h Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3db2c Size: 112KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7gcd Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4999 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE