Static task
static1
Behavioral task
behavioral1
Sample
def44fd29b389b1c2d21396f2b67dd076dca47a87ca776c45cd382f20f9adef3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
def44fd29b389b1c2d21396f2b67dd076dca47a87ca776c45cd382f20f9adef3.exe
Resource
win10v2004-20220901-en
General
-
Target
def44fd29b389b1c2d21396f2b67dd076dca47a87ca776c45cd382f20f9adef3
-
Size
304KB
-
MD5
041cd7da115145bcfe357547b41d4190
-
SHA1
bece96431a866d4922a90af9442416c28ae6334d
-
SHA256
def44fd29b389b1c2d21396f2b67dd076dca47a87ca776c45cd382f20f9adef3
-
SHA512
ce30f26c7423972fa9f3a73aa5879a8ef757f0a069aeeb69018e670b4ec921b8c90173379759614acbc9df1de077bfc02de46d3e89e6edbe1ec3b9b6b536bfcd
-
SSDEEP
6144:BIbpKanRqQRQWgHZLUFdezO8B8gtdb8wdOyrCJX9NVI6wy3+xDCL:BIbpZnEWQWqAUZB8gJqJtc6j3+xDCL
Malware Config
Signatures
Files
-
def44fd29b389b1c2d21396f2b67dd076dca47a87ca776c45cd382f20f9adef3.exe windows x86
74a710791319ffe1ff5e23de8be8df6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
wvnsprintfW
PathMatchSpecW
StrCmpNIA
StrStrW
PathFindFileNameW
wnsprintfW
wvnsprintfA
SHDeleteKeyA
wnsprintfA
PathFileExistsW
StrCmpNIW
PathRemoveFileSpecW
PathCombineW
advapi32
RegCloseKey
DuplicateTokenEx
CryptGetHashParam
RegDeleteValueA
CryptReleaseContext
CryptCreateHash
RegQueryValueExA
Sections
.bov Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yjkp Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pep Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ