Static task
static1
Behavioral task
behavioral1
Sample
885534d895b3041e8ef342ce44af82e49daa1f0de331e27feee7c5f909f21901.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
885534d895b3041e8ef342ce44af82e49daa1f0de331e27feee7c5f909f21901.exe
Resource
win10v2004-20221111-en
General
-
Target
885534d895b3041e8ef342ce44af82e49daa1f0de331e27feee7c5f909f21901.7z
-
Size
5KB
-
MD5
a6e22922b26c9fa954a35777fa8652d2
-
SHA1
6eb6d78a95d4a858b2387cb074b3dae7714fe30b
-
SHA256
396ac22bd2c156bec619f23db3e82665efc435ddf48a89d6edfcb809e15a9bf4
-
SHA512
086d1b30e9e22aced7af259b0aea1533fbed481164cb15be4c6275b7392f6724ea837b4014e5ad98416322e42357fb73971a498ed129ca81d6b54a2a5942f7bc
-
SSDEEP
96:BfD4xo+SQE7tEVJUamFmxOU3HYoF/QSyVdPWhG+QgQw8kukxi8QzQthCG9gE:BExPSQgt2NmFe3Hd5odOTTQw8egGV
Malware Config
Signatures
Files
-
885534d895b3041e8ef342ce44af82e49daa1f0de331e27feee7c5f909f21901.7z.7z
Password: infected
-
885534d895b3041e8ef342ce44af82e49daa1f0de331e27feee7c5f909f21901.exe windows x86
Password: infected
7eca364972e72590833b3d15143fce75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
lstrlen
lstrcpy
SetCurrentDirectoryA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
GetProcAddress
GetFullPathNameA
GetSystemInfo
msvcrt
_initterm
_controlfp
sprintf
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_except_handler3
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
user32
TranslateMessage
GetMessageA
PeekMessageA
MessageBoxA
DispatchMessageA
Sections
.sforce3 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.start Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE