Static task
static1
Behavioral task
behavioral1
Sample
798dbf16c60e2e96121753c6e399345f10d1f96cc60c19a13b572c317ec6106b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
798dbf16c60e2e96121753c6e399345f10d1f96cc60c19a13b572c317ec6106b.exe
Resource
win10v2004-20220812-en
General
-
Target
798dbf16c60e2e96121753c6e399345f10d1f96cc60c19a13b572c317ec6106b
-
Size
56KB
-
MD5
05c4389c881e46717dca51c4068379e0
-
SHA1
eea556f014b2eb41be1514e1d3a25765fef96999
-
SHA256
798dbf16c60e2e96121753c6e399345f10d1f96cc60c19a13b572c317ec6106b
-
SHA512
d35d84903b43da396dab9872d62471bca1d9cad4920980c712639b1ed02c2078e608acb7374fbe45141a987699876bc3d8a197c6038e82960b829261e2fd7dd5
-
SSDEEP
1536:9OhCVsQ3KMfwM2aU8F78Pw4ASDVIIpyaxfC:9zVsQtEyo49UUaRC
Malware Config
Signatures
Files
-
798dbf16c60e2e96121753c6e399345f10d1f96cc60c19a13b572c317ec6106b.exe windows x86
bc7f55ac68ec87ba4c12bbda44183faf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetTempPathA
ReadFile
VirtualAlloc
GetFileSize
WriteFile
GetModuleFileNameA
WinExec
Sleep
GetTickCount
VirtualFree
GetCurrentProcess
CloseHandle
GetProcAddress
GetLastError
LoadLibraryA
CreateFileA
GetStringTypeA
RtlUnwind
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
RegCreateKeyA
RegSetValueExA
RegCloseKey
user32
wsprintfA
MessageBoxW
wvsprintfA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE