Static task
static1
Behavioral task
behavioral1
Sample
c1d458ae0866b8bb6dcbafdbc80e00dbac89123885af91a0630fd3ee25930832.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1d458ae0866b8bb6dcbafdbc80e00dbac89123885af91a0630fd3ee25930832.exe
Resource
win10v2004-20220812-en
General
-
Target
c1d458ae0866b8bb6dcbafdbc80e00dbac89123885af91a0630fd3ee25930832
-
Size
144KB
-
MD5
d6928ace86e5d8e44f4b9a3e3513916a
-
SHA1
c5dad7167e5fd55802cd454afca14ab540af25e0
-
SHA256
c1d458ae0866b8bb6dcbafdbc80e00dbac89123885af91a0630fd3ee25930832
-
SHA512
512bf3fafc444daadd0de41155b7a1d5b7fa2edc423cafce561226e7c82d53d308da0e7e4e84c88e6fb1da3b80717983417a92c2b6654e914f7356bce11bde14
-
SSDEEP
3072:1HtUg70yzPvXSUYHdCd5P30XNKyfvztr3IXUyQ2:HUE0ybCUYHo5P3wNKynzR3pyQ2
Malware Config
Signatures
Files
-
c1d458ae0866b8bb6dcbafdbc80e00dbac89123885af91a0630fd3ee25930832.exe windows x86
ae2d365d5dd3e85f9d0eb5bf5dfe5514
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
GetFileTime
ReadConsoleA
CreateThread
ExitThread
GetCommandLineA
CopyFileExW
FindAtomA
CopyFileW
GetConsoleMode
DeleteFileW
GetComputerNameA
DeleteFileA
GetFileSize
GlobalFree
CopyFileA
GetConsoleMode
SetLastError
CopyFileW
OpenFile
GetCPInfo
CopyFileExA
GetFileSize
FindAtomA
DeleteAtom
CreateDirectoryA
ReadFile
ReadConsoleA
GetCommandLineA
OpenFileMappingA
ReadFile
GlobalFree
DeleteFileA
OpenFileMappingA
GetStdHandle
FindFirstFileA
GetCPInfo
DeleteFileW
CreateThread
GetFileTime
GetCommandLineA
CopyFileExA
GetLastError
ReadConsoleA
GetFileSize
CreateProcessA
GetComputerNameA
WriteFile
DeleteFileA
Sleep
ReadConsoleA
GetComputerNameA
DeleteFileW
CopyFileExA
ExitThread
DeleteAtom
ReadFile
CreateDirectoryA
FindFirstFileA
CopyFileA
CreateThread
GetFileTime
GetConsoleMode
CopyFileW
Sections
.init Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ