Static task
static1
Behavioral task
behavioral1
Sample
a616a619e2bd8a8d1739b0a32369761e502cbea1cc050653cbbe230542980ade.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a616a619e2bd8a8d1739b0a32369761e502cbea1cc050653cbbe230542980ade.exe
Resource
win10v2004-20220812-en
General
-
Target
a616a619e2bd8a8d1739b0a32369761e502cbea1cc050653cbbe230542980ade
-
Size
21KB
-
MD5
293fadb467b2d8c610b8d72941896fc3
-
SHA1
87f1245ba7e5933755d993da2fc6119cfcd90a2a
-
SHA256
a616a619e2bd8a8d1739b0a32369761e502cbea1cc050653cbbe230542980ade
-
SHA512
3594e6ebf1722f19d8b7afbdf73fe0ccb300f4cd815aaa19870925f910b3c9d457f18eccad508b203199df4013f35521d01d01e09d02eb267e39de202f314087
-
SSDEEP
48:y6pAFTG16IkoeCEU3JxkvH63EfloX4GT1h45BG1:9pA5foR7nkSGeLIM
Malware Config
Signatures
Files
-
a616a619e2bd8a8d1739b0a32369761e502cbea1cc050653cbbe230542980ade.exe windows x86
d6867e00f661f1a37add7c4b22b3cf60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
UnlockFile
LockFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
CopyFileA
GetProcAddress
GetSystemTime
ExitProcess
LoadLibraryA
lstrcpyA
user32
wsprintfA
MessageBoxA
shell32
SHGetFolderPathA
shlwapi
PathAppendA
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE