Static task
static1
Behavioral task
behavioral1
Sample
d5c32f8171b6cdc7a2c2389ab462cf6c08246cd4e4656c8750e3b5ad4603ebd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5c32f8171b6cdc7a2c2389ab462cf6c08246cd4e4656c8750e3b5ad4603ebd0.exe
Resource
win10v2004-20221111-en
General
-
Target
d5c32f8171b6cdc7a2c2389ab462cf6c08246cd4e4656c8750e3b5ad4603ebd0
-
Size
86KB
-
MD5
38de9fc323e08e99121f5e4a85b0dee9
-
SHA1
58fe912a30cecfc35905d1c602a6eef5a36f6842
-
SHA256
d5c32f8171b6cdc7a2c2389ab462cf6c08246cd4e4656c8750e3b5ad4603ebd0
-
SHA512
95bd4e23a0cb6bcf58c7169671179458ab406e835572c5b4ca0543027c088f9e6a997354c83c1c21e5ea717841f784b21d84bf37a54797b3164d5312a55b926e
-
SSDEEP
1536:MNqh7wlexsOY8cmVHkx1AufbTIAYOACWmk3O2JB9:MNqhpxtYeKTAOIATAek3O2/
Malware Config
Signatures
Files
-
d5c32f8171b6cdc7a2c2389ab462cf6c08246cd4e4656c8750e3b5ad4603ebd0.exe windows x86
e2bf10fcb6977cb97a081d462a036b6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA
shell32
ShellExecuteA
Sections
Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 150B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE