Static task
static1
Behavioral task
behavioral1
Sample
f7b0f3e3e26b6a0b6dd427db95b0e795283a9e66476eea1b8f252d8f622b7f3c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7b0f3e3e26b6a0b6dd427db95b0e795283a9e66476eea1b8f252d8f622b7f3c.exe
Resource
win10v2004-20220812-en
General
-
Target
f7b0f3e3e26b6a0b6dd427db95b0e795283a9e66476eea1b8f252d8f622b7f3c
-
Size
10KB
-
MD5
6d44706ce5c59005bd83177c490f430b
-
SHA1
a75306d22369844cadc001d2ae469c842a6e062b
-
SHA256
f7b0f3e3e26b6a0b6dd427db95b0e795283a9e66476eea1b8f252d8f622b7f3c
-
SHA512
30a6a8f9b2714889e3414f896bf7417441acf1f8245dee88537562bf9bfefe37b1968b754c33572d165858e730f6801904e28fd87f9f21cbfa1538a4f0680eff
-
SSDEEP
192:W+AXtCFMm21hIexZCtNE3YmZhyh42gpBurBfPsbHfyiLo3S:nAIqmjscYoOyO+rBHEc3S
Malware Config
Signatures
Files
-
f7b0f3e3e26b6a0b6dd427db95b0e795283a9e66476eea1b8f252d8f622b7f3c.exe windows x86
0f196bcea26bb99f2d662f996940aa7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
lstrcatA
CreateDirectoryA
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
VirtualAllocEx
LoadLibraryA
WriteFile
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
LocalFree
WriteProcessMemory
DeleteFileA
CreateRemoteThread
Process32First
lstrlenA
Process32Next
CreateFileA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 861B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE