Static task
static1
Behavioral task
behavioral1
Sample
f3cfd06405780074dd97f49b73a689b59ec5a52f1c65e594049107f89ab06ef3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3cfd06405780074dd97f49b73a689b59ec5a52f1c65e594049107f89ab06ef3.exe
Resource
win10v2004-20220812-en
General
-
Target
f3cfd06405780074dd97f49b73a689b59ec5a52f1c65e594049107f89ab06ef3
-
Size
67KB
-
MD5
670f9124e7cd778d3eb5602825cbff71
-
SHA1
9c68ddae258e7dc7d191976cdd33b8fd0754ee56
-
SHA256
f3cfd06405780074dd97f49b73a689b59ec5a52f1c65e594049107f89ab06ef3
-
SHA512
58a0797258e79c79f9a1870d4dd3668f1c290a748ba3311c97836e7c647cae7147bee1aa3c714d30931c451e8a94e6d76ee183426e5324c570bb07a346498cbb
-
SSDEEP
768:r7UCKkSyo3E8Drhe8L93zZ0KUp4QsvcVsaPqyYMtPD:r/o3E8DrhnL93zZ0KUKQsYdZzt
Malware Config
Signatures
Files
-
f3cfd06405780074dd97f49b73a689b59ec5a52f1c65e594049107f89ab06ef3.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE