Static task
static1
Behavioral task
behavioral1
Sample
18848038a2373910a4aa533ec0aad261e177885eef451a87e3392e2e6c608fdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18848038a2373910a4aa533ec0aad261e177885eef451a87e3392e2e6c608fdf.exe
Resource
win10v2004-20221111-en
General
-
Target
18848038a2373910a4aa533ec0aad261e177885eef451a87e3392e2e6c608fdf
-
Size
817KB
-
MD5
6242f3781781aecc76ee12ffe78dba46
-
SHA1
d186a740496f705e44b71a1d45afc0ffed839528
-
SHA256
18848038a2373910a4aa533ec0aad261e177885eef451a87e3392e2e6c608fdf
-
SHA512
8ae77111ea3c73cae35d5a9eb24c22ecee70e519ef2bebcae1177da38d569950a345282ababd1a7b210e180c52aeafee782dcecd93420b6e8f95dd3b79ecfe97
-
SSDEEP
24576:8z4Y0cOlNJ7tWbUcutmqlWmq6u8IsN6HS4c4I3rLq:FlNJtW2m0Vv5N6U/
Malware Config
Signatures
Files
-
18848038a2373910a4aa533ec0aad261e177885eef451a87e3392e2e6c608fdf.exe windows x86
70339cefe50524eeec312fcfe7c6e19c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
CreateDirectoryW
FormatMessageW
lstrcpynA
GetDiskFreeSpaceW
ReadFile
VirtualProtectEx
GetFileType
lstrcatA
ReadConsoleA
GetFileSize
VirtualFree
SetThreadPriority
GetModuleHandleA
lstrcpynA
lstrcmpA
OpenMutexW
lstrcpynA
DeleteFileW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentThreadId
certmgr
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ