Static task
static1
Behavioral task
behavioral1
Sample
80760375d9c0c2b52d8a6327c6237eaeeae6dac8ed380862fb3982b304584400.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80760375d9c0c2b52d8a6327c6237eaeeae6dac8ed380862fb3982b304584400.exe
Resource
win10v2004-20220812-en
General
-
Target
80760375d9c0c2b52d8a6327c6237eaeeae6dac8ed380862fb3982b304584400
-
Size
76KB
-
MD5
f036793588357a512d14f33f9496e683
-
SHA1
d7bcd3ec05949e1130d4053bc5fa921cd1bedec1
-
SHA256
80760375d9c0c2b52d8a6327c6237eaeeae6dac8ed380862fb3982b304584400
-
SHA512
384c1e671042f053dc42bb8281446c6d0c84aaa4cb8513abf19c7b8b8f01b1e6d7d40fd1e839148d2c40319beeebfe4a34375b8a8437d748076fc19b3174dc8d
-
SSDEEP
1536:2Mxe7IPbmgzDJh6oGfxOhVxPMZNO1DGVlpR:20eEKgzdooGEhvz1izpR
Malware Config
Signatures
Files
-
80760375d9c0c2b52d8a6327c6237eaeeae6dac8ed380862fb3982b304584400.exe windows x86
3e65bc2aea801fe5acc46d6046ebe523
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
CloseHandle
CreateFileA
GetSystemDirectoryA
DeleteFileA
WriteFile
GetCurrentProcess
CreateProcessA
GetStartupInfoA
CreatePipe
GetEnvironmentVariableA
GetShortPathNameA
lstrcmpiA
GetWindowsDirectoryA
SetStdHandle
GetStringTypeW
lstrlenA
GetModuleHandleA
ReadFile
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetStringTypeA
FlushFileBuffers
user32
wsprintfA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE