Static task
static1
Behavioral task
behavioral1
Sample
94ec54aec7d083a0d0cefe5b0f5d49b38f5119732e0ab063c8e8cc1ec7c1653d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
94ec54aec7d083a0d0cefe5b0f5d49b38f5119732e0ab063c8e8cc1ec7c1653d.exe
Resource
win10v2004-20220812-en
General
-
Target
94ec54aec7d083a0d0cefe5b0f5d49b38f5119732e0ab063c8e8cc1ec7c1653d
-
Size
50KB
-
MD5
fa866ae67b304cee40a472c8bbb798fa
-
SHA1
1e390ddc33d1e9b47f0f039f1c54eba58a6d59dd
-
SHA256
94ec54aec7d083a0d0cefe5b0f5d49b38f5119732e0ab063c8e8cc1ec7c1653d
-
SHA512
b40013c35b464f09c98c279082874765766a227a4819de447f74c2bdd309e4eedfea6f300ed9fd6466e51e3ff431e6f23015e706850627e32096fa076cd7628a
-
SSDEEP
768:P0agxhtOwkrXx3BrEOjWVpGEHc43HPZUp0QZW47bdwXpNQe7pFw2pwj/faiymQeN:PJwk13JEO/43BUpJZ+pF3iymtn8iXwmd
Malware Config
Signatures
Files
-
94ec54aec7d083a0d0cefe5b0f5d49b38f5119732e0ab063c8e8cc1ec7c1653d.exe windows x86
c07d10ad484c7e6aab01a2f798a552c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetSystemTime
DeleteFileA
SetFileAttributesA
MoveFileA
FreeResource
CloseHandle
lstrlenA
WriteFile
SizeofResource
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
ReadFile
SetFilePointer
GetModuleFileNameA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
ExitProcess
CreateProcessA
GetStartupInfoA
FreeLibrary
MoveFileExA
CopyFileA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
GetCurrentThreadId
GetModuleHandleA
user32
GetInputState
PostThreadMessageA
GetMessageA
wsprintfA
shell32
ShellExecuteExA
SHChangeNotify
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
rename
mbstowcs
strncat
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ