Static task
static1
Behavioral task
behavioral1
Sample
b15696f12a9539d38aa73a02ed0fac4563c87a2e635dafe47a3a3824221bd197.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b15696f12a9539d38aa73a02ed0fac4563c87a2e635dafe47a3a3824221bd197.exe
Resource
win10v2004-20221111-en
General
-
Target
b15696f12a9539d38aa73a02ed0fac4563c87a2e635dafe47a3a3824221bd197
-
Size
86KB
-
MD5
eda42c7339509c803a284b9002d7dc91
-
SHA1
1ebaf1c8ff4a3779207a3271505c213ac8c61da6
-
SHA256
b15696f12a9539d38aa73a02ed0fac4563c87a2e635dafe47a3a3824221bd197
-
SHA512
5fa92549960e9f40f5defdaef265350fd3b2615464bf1fd7cb3fc5c1d34ec24c52de93c66d346b627cac249b3e203f1d98694aa99f8a61d9b5635c983c7b0bf7
-
SSDEEP
1536:6GCgS0BdG4DiZq6vl0MyVPAqEr2LiqCDjSOiXIG71ukn6OUKpAYk:610CwmFGMN6+qCDeXXIG71ukn6OUIAH
Malware Config
Signatures
Files
-
b15696f12a9539d38aa73a02ed0fac4563c87a2e635dafe47a3a3824221bd197.exe windows x86
9e49a0e7a29388b50a09fdbba3024679
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ReadFile
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetCommandLineA
HeapFree
user32
wsprintfA
shell32
ShellExecuteA
Sections
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE