Static task
static1
Behavioral task
behavioral1
Sample
a7bfa5ba6e8454e11750dc89bb86a903f1cff255c08b13c91545f276200e2cb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7bfa5ba6e8454e11750dc89bb86a903f1cff255c08b13c91545f276200e2cb2.exe
Resource
win10v2004-20221111-en
General
-
Target
a7bfa5ba6e8454e11750dc89bb86a903f1cff255c08b13c91545f276200e2cb2
-
Size
10KB
-
MD5
08f673a19a6f40ad248a7cb391bf7c17
-
SHA1
0d3b5278685df7656f4ad2ca545c0f3fb3963928
-
SHA256
a7bfa5ba6e8454e11750dc89bb86a903f1cff255c08b13c91545f276200e2cb2
-
SHA512
ccf004607016e28cebbc6927718c8d85a6bbe66ccb29533a39731bbabd420c14ee1ec0a42e9b01540c2f6e2daf32269fb82cf8dff91efbf9a88b33ef8764d964
-
SSDEEP
192:SbTD6onobOyV7SM4o4feeEEZpaHSjNdEb7b5bd:Sr3obt7TweUpGSjNq/N5
Malware Config
Signatures
Files
-
a7bfa5ba6e8454e11750dc89bb86a903f1cff255c08b13c91545f276200e2cb2.exe windows x86
66b18ad74eb7db9d498d7ab6c08faba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA
user32
LoadStringA
wsprintfA
shlwapi
StrToIntA
msvcrt
strcat
strlen
malloc
_strlwr
strcpy
strcmp
Sections
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ