Static task
static1
Behavioral task
behavioral1
Sample
11d13a568328dd78dc7d6ba9e0c91e3f3c8f490b15338ad4c1330a03203d6ab5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
11d13a568328dd78dc7d6ba9e0c91e3f3c8f490b15338ad4c1330a03203d6ab5.exe
Resource
win10v2004-20220812-en
General
-
Target
11d13a568328dd78dc7d6ba9e0c91e3f3c8f490b15338ad4c1330a03203d6ab5
-
Size
101KB
-
MD5
2b2ba16e95ec3553d42f5aee5513fb60
-
SHA1
780fe6dc726ee8dee074af9c3266a64c2b6a7827
-
SHA256
11d13a568328dd78dc7d6ba9e0c91e3f3c8f490b15338ad4c1330a03203d6ab5
-
SHA512
8227e9ba49e19723842b7c7bd0d814d3db60fc2c00c7fc7ff8e2d3bb4400bb94bc54029e836a3d98f11818c17706b34359b9374cbf76e03d04ecfb23e64adc03
-
SSDEEP
768:lpiyCbb3c6COK34UFIcS++8l9qQlh8UCXlP6rAggb/Hlois6diyg:lp3C3cyKoUOcS++GjlXCXlP6cgcWv6
Malware Config
Signatures
Files
-
11d13a568328dd78dc7d6ba9e0c91e3f3c8f490b15338ad4c1330a03203d6ab5.exe windows x86
4e5c87da711f0579703360dd10335330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegQueryInfoKeyA
kernel32
GetCommandLineA
FindClose
lstrlenA
ReadFile
CreateDirectoryA
FormatMessageA
GetStdHandle
GetPriorityClass
CopyFileA
CompareStringA
FlushFileBuffers
DeleteFileW
CopyFileExA
GetLastError
ExitProcess
GetLocalTime
GetFileType
GlobalFree
WriteFile
user32
GetFocus
AppendMenuA
Sections
.8h7fg Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.3b6f6 Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52h7 Size: 58KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a157 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2ba62 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1015B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ