Static task
static1
Behavioral task
behavioral1
Sample
c007ad216705e73b58c260ab049ba00a91745f0b092b1b29db1c8b360874df31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c007ad216705e73b58c260ab049ba00a91745f0b092b1b29db1c8b360874df31.exe
Resource
win10v2004-20221111-en
General
-
Target
c007ad216705e73b58c260ab049ba00a91745f0b092b1b29db1c8b360874df31
-
Size
168KB
-
MD5
9a46d1e37115ca96d5929a87eaa69a4f
-
SHA1
53608c1b391bc88ac44afbc432d046379aca04b9
-
SHA256
c007ad216705e73b58c260ab049ba00a91745f0b092b1b29db1c8b360874df31
-
SHA512
c28212e878d1b10bfe73d48098ece5ce9395fc47523022b52561e0b16b9716c279c7982744449e1775e553c97f5d10c2d7413d6c9317a520b28ec6e5e07d3f3b
-
SSDEEP
3072:uDhImBR2nVPklyoXIz7oom36MMHW2JShcCrAppjb:E5BMPklYNNbDvjb
Malware Config
Signatures
Files
-
c007ad216705e73b58c260ab049ba00a91745f0b092b1b29db1c8b360874df31.exe windows x86
2ff9c9b9ef82bd2c31a51b59de065688
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
GetStdHandle
CreateThread
GetCommandLineA
CopyFileW
CreateDirectoryA
GetCPInfo
OpenFileMappingA
DeleteAtom
CopyFileExA
CopyFileA
GlobalFree
GetFileTime
DeleteFileA
DeleteFileW
Sleep
GlobalFree
ReadFile
CopyFileExA
ReadConsoleA
OpenFileMappingA
FindFirstFileA
Sleep
GetLastError
GetFileTime
CopyFileW
ReadConsoleW
GetFileSize
DeleteFileW
ExitThread
OpenFile
CopyFileExW
CopyFileA
CreateThread
FindAtomA
CopyFileExA
GetConsoleMode
ExitThread
DeleteFileA
WriteFile
DeleteFileW
GetComputerNameA
CreateThread
GetCPInfo
CopyFileExW
FindFirstFileA
OpenFileMappingA
DeleteAtom
GlobalFree
ReadConsoleW
CopyFileA
CreateThread
DeleteFileW
GetCommandLineA
CopyFileA
GetFileTime
DeleteAtom
ReadConsoleW
GetCPInfo
FindFirstFileA
CopyFileExA
GetComputerNameA
WriteFile
GetConsoleMode
OpenFileMappingA
ReadFile
CreateDirectoryA
DeleteFileW
FindFirstFileA
OpenFile
Sleep
CreateProcessA
CreateThread
GetLastError
OpenFileMappingA
CopyFileA
GlobalFree
GetConsoleMode
ExitThread
GetStdHandle
FindAtomA
OpenFile
GetCPInfo
CopyFileA
FindAtomA
FindFirstFileA
CopyFileExA
GetFileTime
ExitThread
CreateDirectoryA
CreateThread
ReadConsoleW
ReadConsoleA
GetFileSize
OpenFileMappingA
GetCommandLineA
Sleep
DeleteAtom
ReadFile
CopyFileW
Sections
.init Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 8KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ