Static task
static1
Behavioral task
behavioral1
Sample
b58c68d97f6cffc7b4adcbdeef03315e5a049c068692922994f1940f2897b511.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b58c68d97f6cffc7b4adcbdeef03315e5a049c068692922994f1940f2897b511.exe
Resource
win10v2004-20220812-en
General
-
Target
b58c68d97f6cffc7b4adcbdeef03315e5a049c068692922994f1940f2897b511
-
Size
15KB
-
MD5
e41a1879f95de895facea1a6b1cad60b
-
SHA1
649439c990a7746512c9391d305d681b6e183c88
-
SHA256
b58c68d97f6cffc7b4adcbdeef03315e5a049c068692922994f1940f2897b511
-
SHA512
5548c1a644cbedd94f7e3a79a0e1c4189a58f4dd144844ac2264f2a7b9fc1a58c3ec0e21eb9d8c6501c5fc8f561f9ce9263963d12028bd51cef98bd41f4a6f44
-
SSDEEP
384:I+wIRa1Hrq3IxP4HxI+7/Hyvwr7oudorXw:8IRa1HrqYxP8I+bPsXw
Malware Config
Signatures
Files
-
b58c68d97f6cffc7b4adcbdeef03315e5a049c068692922994f1940f2897b511.exe windows x86
faf46a7163ebe3343e8dc339a1c0acb1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrA
StrCmpNA
kernel32
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
FlushFileBuffers
WriteFile
ReadFile
lstrlenA
lstrcatA
CreateFileA
CopyFileA
GetTickCount
GetTempPathA
OpenEventA
Sleep
GetModuleFileNameA
SetFilePointer
user32
wsprintfA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 749B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ