Static task
static1
Behavioral task
behavioral1
Sample
a396104eaa9152794021729bb09d455267d3b4503ed0cb940441a4894ad059e1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a396104eaa9152794021729bb09d455267d3b4503ed0cb940441a4894ad059e1.exe
Resource
win10v2004-20220812-en
General
-
Target
a396104eaa9152794021729bb09d455267d3b4503ed0cb940441a4894ad059e1
-
Size
13KB
-
MD5
264017337619d90d99f802bc611ec523
-
SHA1
f23c5cd3cc4a0eb9b52c397f50b929f87bee78bb
-
SHA256
a396104eaa9152794021729bb09d455267d3b4503ed0cb940441a4894ad059e1
-
SHA512
a62d444a579d312200e0336a67b4417acea2d310fd69f294f8aad63ccb6b4367e49671b470505b86b071530b0c5e793f9d67e32ad0e83948ae17d9369722d91b
-
SSDEEP
384:0st3U3563eroA1GSTVUN/x9UTOMLgHQWa9dW:lE35tro6GQ6wTOGgE
Malware Config
Signatures
Files
-
a396104eaa9152794021729bb09d455267d3b4503ed0cb940441a4894ad059e1.exe windows x86
b07f8a45685500966e8d64fb957f809b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
DeleteFileA
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
ResumeThread
CloseHandle
SetPriorityClass
GetCurrentProcess
CreateProcessA
GetShortPathNameA
GetEnvironmentVariableA
GetModuleFileNameA
MultiByteToWideChar
GetSystemDirectoryA
FindFirstFileA
GetFileSize
ReadFile
WriteFile
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoCreateInstance
CoInitialize
msvcrt
??2@YAPAXI@Z
free
sprintf
getenv
__p___argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ