Static task
static1
Behavioral task
behavioral1
Sample
c737e999c947d19b2190bbe3e2fb88962da61175a42ef72e6c6d0cddd461f91c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c737e999c947d19b2190bbe3e2fb88962da61175a42ef72e6c6d0cddd461f91c.exe
Resource
win10v2004-20221111-en
General
-
Target
c737e999c947d19b2190bbe3e2fb88962da61175a42ef72e6c6d0cddd461f91c
-
Size
59KB
-
MD5
93148b6c6411bd631af25827add9d737
-
SHA1
c780439630c5d36469be26fb755f032800bfe23a
-
SHA256
c737e999c947d19b2190bbe3e2fb88962da61175a42ef72e6c6d0cddd461f91c
-
SHA512
91a4987f4447ba7d4ea75d4d69d05892c8f4515d035180f0801577531a7000c3ce54d95c26633f1b53cab22c9cbf44ecc24afe0e10bbd8551a275d646aae1276
-
SSDEEP
1536:SEMFQP5eFQP5cKbItVB12gUydCCDJL9r5x2sAMuNEQ2HP4Jf/5GaGzj9FFdcM:SEMFQP5eFQP5cKAVB12gUydCCDJL9r5h
Malware Config
Signatures
Files
-
c737e999c947d19b2190bbe3e2fb88962da61175a42ef72e6c6d0cddd461f91c.exe windows x86
66b18ad74eb7db9d498d7ab6c08faba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA
user32
LoadStringA
wsprintfA
shlwapi
StrToIntA
msvcrt
strcat
strlen
malloc
_strlwr
strcpy
strcmp
Sections
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ