Static task
static1
Behavioral task
behavioral1
Sample
b0ab3aa9b152ce40bead0dbe93d1f49fe4c76fe65dca2df641eb78528a40e918.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0ab3aa9b152ce40bead0dbe93d1f49fe4c76fe65dca2df641eb78528a40e918.exe
Resource
win10v2004-20220812-en
General
-
Target
b0ab3aa9b152ce40bead0dbe93d1f49fe4c76fe65dca2df641eb78528a40e918
-
Size
20KB
-
MD5
f5747f771cd1bebd39791157b622c033
-
SHA1
3abff2d93722d4e737ca945573a5f859c5b71760
-
SHA256
b0ab3aa9b152ce40bead0dbe93d1f49fe4c76fe65dca2df641eb78528a40e918
-
SHA512
f30047482ebdc4a24e2bc8c3cb822f9df81b40ea6e9c9a454824c213dbb652ab536e2c87de7afecdbcc3ed15d3c250d8a5e53822fd82cbc76363eda495b79dce
-
SSDEEP
384:daLDLGXrKzpllHiFEh801dvGp/SnjYCfn+oI/FDfXZzoHWw9M:ALp1PiF3p4jrnYftRwi
Malware Config
Signatures
Files
-
b0ab3aa9b152ce40bead0dbe93d1f49fe4c76fe65dca2df641eb78528a40e918.exe windows x86
ff3357c629adaa00f6f0d86be23f113e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle
user32
CharLowerA
advapi32
OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE