Static task
static1
Behavioral task
behavioral1
Sample
d62fab1899f1efe07f7965a3a9bdda0729788907dc8acffb304fea8cd5f3218c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d62fab1899f1efe07f7965a3a9bdda0729788907dc8acffb304fea8cd5f3218c.exe
Resource
win10v2004-20220812-en
General
-
Target
d62fab1899f1efe07f7965a3a9bdda0729788907dc8acffb304fea8cd5f3218c
-
Size
825KB
-
MD5
3d255352b2414766c85a26a4014a7fd6
-
SHA1
9a53d6bac25b3c3c978161e786bae86f2537530f
-
SHA256
d62fab1899f1efe07f7965a3a9bdda0729788907dc8acffb304fea8cd5f3218c
-
SHA512
e5674cbb44ad983e795770f3c79cfe6d181f2c9d96e945c099af27e7be2d7f4e9012caecf2020ee9383b45b31136fae818759d82f5a2b79494fa11958fcd057f
-
SSDEEP
12288:q2pLIqNqPCwy6/FOD1ho6zWD07N0RoG5XS6SarFLhzFAkNoDF/UE5Vm:qlPEcO5h/7N0RtpfFAkNkFz
Malware Config
Signatures
Files
-
d62fab1899f1efe07f7965a3a9bdda0729788907dc8acffb304fea8cd5f3218c.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.E64E Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0AuA Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Fd9f Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 690KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE