Static task
static1
Behavioral task
behavioral1
Sample
5a90ecec7838f4ce4eb74a17afce45fac797ca31fc5f1ff0edb10101bb03e292.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a90ecec7838f4ce4eb74a17afce45fac797ca31fc5f1ff0edb10101bb03e292.exe
Resource
win10v2004-20220901-en
General
-
Target
5a90ecec7838f4ce4eb74a17afce45fac797ca31fc5f1ff0edb10101bb03e292
-
Size
3KB
-
MD5
b6f8e8be6a63fe1c2339e75eab35edae
-
SHA1
8f09e6ccc320f8589e589540a8dc63a415565a9c
-
SHA256
5a90ecec7838f4ce4eb74a17afce45fac797ca31fc5f1ff0edb10101bb03e292
-
SHA512
cf136cd8a2b06dd34c6e917b44132f5bff540abe269b11da0dee9074a97bcf967cd13903a831d3229b6a11c71f6ffc4ef6975a56c1e8c2a95fbc89e999f1ff3c
Malware Config
Signatures
Files
-
5a90ecec7838f4ce4eb74a17afce45fac797ca31fc5f1ff0edb10101bb03e292.exe windows x86
9bab55a8b8c3bde7008376ee33b0b7a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetCurrentProcess
FormatMessageA
GetLastError
LocalFree
advapi32
OpenProcessToken
LookupPrivilegeValueW
InitiateSystemShutdownW
AdjustTokenPrivileges
shell32
CommandLineToArgvW
crtdll
fflush
fprintf
_iob
fputs
exit
user32
CharToOemA
Sections
.text Size: 1024B - Virtual size: 659B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 818B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ