Static task
static1
Behavioral task
behavioral1
Sample
74fc49f84654681b5eaecbdbaac682d02f3f3be43de3d126022f7597b62bc154.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74fc49f84654681b5eaecbdbaac682d02f3f3be43de3d126022f7597b62bc154.exe
Resource
win10v2004-20221111-en
General
-
Target
74fc49f84654681b5eaecbdbaac682d02f3f3be43de3d126022f7597b62bc154
-
Size
204KB
-
MD5
65310e132ec7245ef57e82b19b588a9d
-
SHA1
552995010e183436e2932e2f8258612281c2088a
-
SHA256
74fc49f84654681b5eaecbdbaac682d02f3f3be43de3d126022f7597b62bc154
-
SHA512
d3d5618baed14717bc8e8a3af81b13f3fe1eeb3639b1606592edd6f5bfb3587e4b79d326651b4d082e552730b6126f502635c14d9182df23829e53771852ce73
-
SSDEEP
3072:P9R5aD8d5W3rNDpfaogXrmbWsIa8ccsCIbCcR7YAnV4mVopKTTu:P9LSi5W3rNlUIW96AURjmmVL
Malware Config
Signatures
Files
-
74fc49f84654681b5eaecbdbaac682d02f3f3be43de3d126022f7597b62bc154.exe windows x86
8f79fb7e1d5ec3a753e9c52007e52830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
lstrlenA
GetModuleFileNameA
WriteFile
CreateFileA
SetFilePointer
ReadFile
LoadLibraryA
GetProcAddress
CloseHandle
FreeLibrary
GetStartupInfoA
GetModuleHandleA
advapi32
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
user32
wsprintfA
imagehlp
MakeSureDirectoryPathExists
msvcrt
_strnset
strlen
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE