Static task
static1
Behavioral task
behavioral1
Sample
c88421859e817c3cf16d15079e430f0b18b98755193e2d61dcbbd73225ee8673.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c88421859e817c3cf16d15079e430f0b18b98755193e2d61dcbbd73225ee8673.exe
Resource
win10v2004-20221111-en
General
-
Target
c88421859e817c3cf16d15079e430f0b18b98755193e2d61dcbbd73225ee8673
-
Size
23KB
-
MD5
966843d8c9fa9352e0c4c9f0bc75f0b3
-
SHA1
3ba4b63f33f3c6feaca7bc44b89f30a70c1de01d
-
SHA256
c88421859e817c3cf16d15079e430f0b18b98755193e2d61dcbbd73225ee8673
-
SHA512
512c40bf0e8ac1cd43ac0f6a3857ef86ccf6f03312f21752e51a9ff3e4a0a203b653bd6fb4d03fd7b86dc3e071bb4f565496e84ec509c566e9a1f7d6e7e0751e
-
SSDEEP
384:IxA670SlLGgdD0Ru5LcfJy+fpvyWrwtkrkNLdbaLa4CwUJuUCSFtVcG+We8EoEWt:IxA670SlLGgl1cfJjtBrwtkrwbaLa4Pe
Malware Config
Signatures
Files
-
c88421859e817c3cf16d15079e430f0b18b98755193e2d61dcbbd73225ee8673.exe windows x86
516c0b65f27e46087d95960014312294
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
WinExec
GetTempFileNameA
GetTempPathA
Sleep
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
CreateFileA
CreateProcessA
lstrcatA
ExitProcess
WritePrivateProfileStringA
GetModuleFileNameA
GetWindowsDirectoryA
FreeLibrary
GetLastError
CreateMutexA
LCMapStringA
WideCharToMultiByte
GetStringTypeW
DuplicateHandle
GetCurrentProcess
GetPrivateProfileStringA
CloseHandle
GetStringTypeA
MultiByteToWideChar
RtlUnwind
LCMapStringW
user32
wsprintfA
MessageBoxA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
shell32
SHGetSpecialFolderPathA
shlwapi
PathAppendA
SHSetValueA
Sections
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ