Static task
static1
Behavioral task
behavioral1
Sample
c1aebfbbd9362e678482e65dd30965a2a8ab82fcb31a5962e7b66b824f7e1e3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1aebfbbd9362e678482e65dd30965a2a8ab82fcb31a5962e7b66b824f7e1e3e.exe
Resource
win10v2004-20220812-en
General
-
Target
c1aebfbbd9362e678482e65dd30965a2a8ab82fcb31a5962e7b66b824f7e1e3e
-
Size
747KB
-
MD5
486d8d42ce2001e4b3d75fd0dca326c3
-
SHA1
f568b447e2a08adfe1d282c8b624493a0fbb1226
-
SHA256
c1aebfbbd9362e678482e65dd30965a2a8ab82fcb31a5962e7b66b824f7e1e3e
-
SHA512
392fc302c6acc1a77ec07f95220ea12ddc95aff0dff2b6a535ea86b785fb79e28a30d4b6c94185c823477830f9c00d40f926b738fde61389553379a850c517ab
-
SSDEEP
12288:zVR9KWde2gnO8w+sYzygCTAX/yo/7VZ0hrY+Tvd8B7G8zBg30mKi5nj3dRng7yTy:zVR9KWdbg7w+je3ojVqJTvd8B7Guyoe+
Malware Config
Signatures
Files
-
c1aebfbbd9362e678482e65dd30965a2a8ab82fcb31a5962e7b66b824f7e1e3e.exe windows x86
0e30f30ededd4835943696d4846422e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileAttributesW
GetModuleHandleA
DeleteFileA
HeapDestroy
GetCommandLineA
GetStartupInfoA
GetDriveTypeW
GetCommandLineA
HeapCreate
CloseHandle
SetLastError
CreateSemaphoreA
GetEnvironmentVariableA
GlobalFlags
lstrlenA
GetConsoleTitleW
CreateEventW
EnumResourceTypesA
WriteConsoleA
advapi32
IsValidSid
IsValidSid
RegEnumKeyA
CloseEventLog
IsValidAcl
RegQueryValueW
IsValidSid
CreateProcessAsUserW
IsValidSid
InitializeSid
IsValidSid
RegDeleteValueA
RegCreateKeyExW
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ