Static task
static1
Behavioral task
behavioral1
Sample
d65aec651d3c468476ca75aefc25d640ddd2e674960200bec2b0d15fbb2786e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d65aec651d3c468476ca75aefc25d640ddd2e674960200bec2b0d15fbb2786e5.exe
Resource
win10v2004-20220812-en
General
-
Target
d65aec651d3c468476ca75aefc25d640ddd2e674960200bec2b0d15fbb2786e5
-
Size
44KB
-
MD5
51039ea7a8c4cdac739dd8a90d9fadb3
-
SHA1
cdcd2a33ea8e5ac1272710c0efd8887dfe480306
-
SHA256
d65aec651d3c468476ca75aefc25d640ddd2e674960200bec2b0d15fbb2786e5
-
SHA512
b7a0dcd67ad8a02e00f164cfbf18a0069f395fba3839f6b9ae007d4309d0edcfa4685d595ff37f62f41438e569b12c2b8083bb3f84216fb98144db8a56d8bb02
-
SSDEEP
768:oWazMlxloA9LwxZL6Wx8gX3A0GV3ydHfh/:oWazcwiBhViz
Malware Config
Signatures
Files
-
d65aec651d3c468476ca75aefc25d640ddd2e674960200bec2b0d15fbb2786e5.exe windows x86
000620b53902fcf1b5c7e2da0655c92c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CreateDirectoryA
DeleteFileA
CreateProcessA
TerminateProcess
OpenProcess
Sleep
GetFileAttributesA
MoveFileExA
CloseHandle
GetTempFileNameA
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetStartupInfoA
GetModuleHandleA
user32
SendMessageA
wsprintfA
FindWindowA
msvcrt
strlen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strlwr
Sections
.upx4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ