Static task
static1
Behavioral task
behavioral1
Sample
a647baa0301a44427d465592d39a1e5185da7cb13bfeb97b310eebc305a84396.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a647baa0301a44427d465592d39a1e5185da7cb13bfeb97b310eebc305a84396.exe
Resource
win10v2004-20220812-en
General
-
Target
a647baa0301a44427d465592d39a1e5185da7cb13bfeb97b310eebc305a84396
-
Size
2KB
-
MD5
b3987aeb22fc92e70fe821a6423792e8
-
SHA1
162802da7b36cb7d3df13253e597fd8d9ee31399
-
SHA256
a647baa0301a44427d465592d39a1e5185da7cb13bfeb97b310eebc305a84396
-
SHA512
633abed36f882753328fe38c7c7d8c787700353b60986db940027fb50eaae5f3a6f44f7d68d99a3c062f8f1b878f216493a21c5bc70d58053c9e7f935d2b45bc
Malware Config
Signatures
Files
-
a647baa0301a44427d465592d39a1e5185da7cb13bfeb97b310eebc305a84396.exe windows x86
72dd1e0043d92f48c664ec9bc27a2501
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Module32NextW
CloseHandle
OpenProcess
GetLastError
GetCurrentThread
GetCurrentProcess
lstrcmpiW
TerminateProcess
Process32FirstW
Process32NextW
OpenEventA
PulseEvent
DeleteFileW
Module32FirstW
CreateToolhelp32Snapshot
lstrcatW
SetLastError
GetTempPathW
shlwapi
SHDeleteKeyA
shell32
SHGetFolderPathW
advapi32
OpenThreadToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
ole32
CoInitializeEx
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE