Static task
static1
Behavioral task
behavioral1
Sample
985849a4356d1b843964f199bcf48e8efeb5f6da65549e7a2023f931d4782e03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
985849a4356d1b843964f199bcf48e8efeb5f6da65549e7a2023f931d4782e03.exe
Resource
win10v2004-20221111-en
General
-
Target
985849a4356d1b843964f199bcf48e8efeb5f6da65549e7a2023f931d4782e03
-
Size
8KB
-
MD5
c01d567d80cabc47a5b47a8e0ed17e02
-
SHA1
ab75f5759da16e14223c71700c6c60071ab9b94c
-
SHA256
985849a4356d1b843964f199bcf48e8efeb5f6da65549e7a2023f931d4782e03
-
SHA512
759449e875513f670cad112e349b24e92acda6424b7b13708b333bcaf31e1181c54601d65186ed24b68b5aeaabb21a39b13b6ed278d5a8e102e0376418c1a344
-
SSDEEP
96:l30H0GV2/wUqGhj+yV7nS62sQC4o4fOYyTSzm9izZp43Z9ND1y:R0H0G6wUqG9+yV7SM4o4feeEEZpaHD1y
Malware Config
Signatures
Files
-
985849a4356d1b843964f199bcf48e8efeb5f6da65549e7a2023f931d4782e03.exe windows x86
96b2e968c8d942b1c476ffc19880a760
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_strlwr
strcpy
strcat
strcmp
kernel32
HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap
user32
LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA
shlwapi
StrToIntA
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ