InitKrubwmvu
Static task
static1
Behavioral task
behavioral1
Sample
d04e18b5de9872e58647ac0cd3e86b2186e34520df7706a132c6864e41faa6eb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d04e18b5de9872e58647ac0cd3e86b2186e34520df7706a132c6864e41faa6eb.exe
Resource
win10v2004-20221111-en
General
-
Target
d04e18b5de9872e58647ac0cd3e86b2186e34520df7706a132c6864e41faa6eb
-
Size
62KB
-
MD5
177495d356818c14c360088c78fa4dbb
-
SHA1
21da8f753be000f05dc19386bae2dbb0f8c25596
-
SHA256
d04e18b5de9872e58647ac0cd3e86b2186e34520df7706a132c6864e41faa6eb
-
SHA512
a7a86177ef04c66a42e14cdb8b344311bd0d8f6fa837f978e03ba389f4d18ba05ed1c856d8f30bb61940d5edc544a7fac46c1761921fdf53156273b67d6cf5be
-
SSDEEP
1536:3smJYtb+G4HycddkEWL+obZMGTqBtFfqv2bFzZyYR:zJub+Geycgqtt8vS8k
Malware Config
Signatures
Files
-
d04e18b5de9872e58647ac0cd3e86b2186e34520df7706a132c6864e41faa6eb.exe windows x86
af6814a8d7f091e1d89d829ba7827d7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
GetStartupInfoA
GetModuleFileNameA
advapi32
GetTokenInformation
ReadEventLogW
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ldata2 Size: 16B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enull Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ