Static task
static1
Behavioral task
behavioral1
Sample
f62409f676d4bfd536a0ff3d52e68765accf66394abdae943538305684d40287.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f62409f676d4bfd536a0ff3d52e68765accf66394abdae943538305684d40287.exe
Resource
win10v2004-20221111-en
General
-
Target
f62409f676d4bfd536a0ff3d52e68765accf66394abdae943538305684d40287
-
Size
37KB
-
MD5
031c87609a4b642cadd918a56794c9a6
-
SHA1
5c3ae8ba6d3fc97bb65abfb9343fef7cfd8d4a70
-
SHA256
f62409f676d4bfd536a0ff3d52e68765accf66394abdae943538305684d40287
-
SHA512
c16db55fac3ad179bce32efd237beac580f8de2da7b388552a4e5389a65d707c69037bba9e76ff20f5f96eb5aa706928622ab807fdafb9646aab1affd35d8f6f
-
SSDEEP
768:eYFD8Bd8yLspnm2NeJBIcRnL5ZJ3lJ1snq9wXNlhReewBBd:eYFgnItbNe3IgjjjsqKNrR8
Malware Config
Signatures
Files
-
f62409f676d4bfd536a0ff3d52e68765accf66394abdae943538305684d40287.exe windows x86
d0ce82ba00d2f51a0aca2713ffe33076
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
OpenProcess
lstrcatA
CreateDirectoryA
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
VirtualAllocEx
CreateRemoteThread
Process32Next
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
LocalFree
WriteProcessMemory
DeleteFileA
Process32First
lstrlenA
LoadLibraryA
CreateFileA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yz3tgtyl Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5eofyr26 Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE