Static task
static1
Behavioral task
behavioral1
Sample
718641b42684258c0aa27b3a9091433b82e394e090a83af4385c9e1a5a4f12da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
718641b42684258c0aa27b3a9091433b82e394e090a83af4385c9e1a5a4f12da.exe
Resource
win10v2004-20221111-en
General
-
Target
718641b42684258c0aa27b3a9091433b82e394e090a83af4385c9e1a5a4f12da
-
Size
1.5MB
-
MD5
569a8de267d3eaa1e1f7d590fa4fd284
-
SHA1
0dee9551f5a4afdf52a02d4e4162b269e2f22c82
-
SHA256
718641b42684258c0aa27b3a9091433b82e394e090a83af4385c9e1a5a4f12da
-
SHA512
ba97f45a6add6a381d4d51e913ae659137ec16da6c38fa75d988bd0b4868fb1756eba3caffde3060a365e38f4715dab560ac6b289619e75527d57a8fd1677c7a
-
SSDEEP
49152:glG4xBHgwc+dzBJzHVX/qmdXq4aQ4f32odmw:glG40+pBB1Xq4aQyL
Malware Config
Signatures
Files
-
718641b42684258c0aa27b3a9091433b82e394e090a83af4385c9e1a5a4f12da.exe windows x86
8ae571e62a3de0944af5f9fc8966bc7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
GetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetModuleFileNameA
SetFilePointer
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
MultiByteToWideChar
CreateDirectoryW
GetFileAttributesW
SetFileTime
GetModuleHandleW
GetStartupInfoW
user32
wsprintfW
shell32
ShellExecuteW
msvcrt
_XcptFilter
??2@YAPAXI@Z
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_CxxThrowException
wcscat
sprintf
calloc
free
malloc
wcslen
wcscpy
wcsstr
_exit
??0exception@@QAE@ABQBD@Z
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ