Static task
static1
Behavioral task
behavioral1
Sample
982e4d1709725f65243dcc3b445c439ded1b7745941841244980c43a01d33eb5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
982e4d1709725f65243dcc3b445c439ded1b7745941841244980c43a01d33eb5.exe
Resource
win10v2004-20220901-en
General
-
Target
982e4d1709725f65243dcc3b445c439ded1b7745941841244980c43a01d33eb5
-
Size
1.2MB
-
MD5
3f6047373b46db52c0f69ac0bf9de409
-
SHA1
cb6c625c3ccfa8baffe0cc348a500e63ee258392
-
SHA256
982e4d1709725f65243dcc3b445c439ded1b7745941841244980c43a01d33eb5
-
SHA512
672e9b2f44c451610778bb3cec592096dee4b21b0886540e2854bcb14168119917b14f31ab6dfa5b0865d7141d45f3c28f987662b3542fb3f930babcbef650d4
-
SSDEEP
1536:HqIek7AWGx51DE9QMx1FMe0FT98nvuuDbPGi9Hyp/U2:zFex5zMN9uh
Malware Config
Signatures
Files
-
982e4d1709725f65243dcc3b445c439ded1b7745941841244980c43a01d33eb5.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE