Static task
static1
Behavioral task
behavioral1
Sample
96c9925246f305955cc2a14d4b95263c62f66579db31a6b5277aaca667d7b83e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96c9925246f305955cc2a14d4b95263c62f66579db31a6b5277aaca667d7b83e.exe
Resource
win10v2004-20221111-en
General
-
Target
96c9925246f305955cc2a14d4b95263c62f66579db31a6b5277aaca667d7b83e
-
Size
6.2MB
-
MD5
aa7c95e580f9b69f7ba52c33243bea96
-
SHA1
5ead3c8e584c52f82e8b28864417897875d4a35e
-
SHA256
96c9925246f305955cc2a14d4b95263c62f66579db31a6b5277aaca667d7b83e
-
SHA512
9f0c0d779106fb76606ee7e69e51a1e7c21a66bc7179841103e160885e9641a349454e57d504b3546a8acf5ad1c29b95260d05d0995b7a1fc0c2427616d3e7d8
-
SSDEEP
49152:gzrh20HcSyFeOJpl6IKxrrQwgTz4HhsH+oYTRayy2LFxK5e6JZp2:Mrh2RTSfQwNHhluy
Malware Config
Signatures
Files
-
96c9925246f305955cc2a14d4b95263c62f66579db31a6b5277aaca667d7b83e.exe windows x86
878e6faaadbdaed14558548320ded7c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
ShellExecuteA
shlwapi
StrStrA
StrChrIA
kernel32
GetModuleHandleA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetCurrentDirectoryA
LoadResource
GetTickCount
GetVersion
urlmon
CoInternetCompareUrl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE