Static task
static1
Behavioral task
behavioral1
Sample
a8ca50dda94b66908bd4d2866bbe96cdb3728cc414649a5c63c7965e6d7a388f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8ca50dda94b66908bd4d2866bbe96cdb3728cc414649a5c63c7965e6d7a388f.exe
Resource
win10v2004-20221111-en
General
-
Target
a8ca50dda94b66908bd4d2866bbe96cdb3728cc414649a5c63c7965e6d7a388f
-
Size
13KB
-
MD5
4af64674bc187a99ae4056b8bd94cd5b
-
SHA1
68ab7dce38b75bddcfb5fcf7b9d50e06ec5ce976
-
SHA256
a8ca50dda94b66908bd4d2866bbe96cdb3728cc414649a5c63c7965e6d7a388f
-
SHA512
285462fabf68c035db43cae607af112413e68b3719137d9992863a675425a4ce6d3a9d064e044aee6cb93177a7d02103acadf9d2a818cb58ff8c2aa289f5c427
-
SSDEEP
192:9O9jpZ11VDPq8mtrem1eC7e93yndOzSMxz0wzJEcX6lhy9eE:9Oln1Tm/em1ewe9wmDzV6lc
Malware Config
Signatures
Files
-
a8ca50dda94b66908bd4d2866bbe96cdb3728cc414649a5c63c7965e6d7a388f.exe windows x86
9eeefa7f6cdca34a42a6c3913e8fb403
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
GetTempFileNameW
FreeResource
FindResourceW
LoadResource
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
GetModuleFileNameW
CreateFileW
lstrlenW
GetTempPathW
LockResource
lstrcatW
CloseHandle
shell32
SHFileOperationW
shlwapi
StrChrW
StrRChrW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
memmove
memset
Sections
pe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ