Static task
static1
Behavioral task
behavioral1
Sample
a5a0e5e73fc80dd5e70e1874a060b8a7c2c25b26aec5f54b123771a8535d1c56.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
a5a0e5e73fc80dd5e70e1874a060b8a7c2c25b26aec5f54b123771a8535d1c56.exe
Resource
win10v2004-en-20220112
General
-
Target
a5a0e5e73fc80dd5e70e1874a060b8a7c2c25b26aec5f54b123771a8535d1c56
-
Size
1.1MB
-
MD5
622fc2a2a3ff40714efeb318c6d528b1
-
SHA1
198a83f11b548695aa7b9736fdc8fa6b1527ba4c
-
SHA256
a5a0e5e73fc80dd5e70e1874a060b8a7c2c25b26aec5f54b123771a8535d1c56
-
SHA512
3c8b0979f4e3f8ebe97a82d120d5bb65d783304bfa88e82c76d8590ec53683b58aa5f7e3ec56ebe2e6a946268d0973c9f3c173979194fa57069194ebe180bd54
-
SSDEEP
12288:Wavu9nPVhpsctE/K83aeiBqyac3YbMgxyADgpMUk:3iPVfscyyW/CTacIbjxyrk
Malware Config
Signatures
Files
-
a5a0e5e73fc80dd5e70e1874a060b8a7c2c25b26aec5f54b123771a8535d1c56.exe windows x86
29a6b3852c350056f49a532c5f015785
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
FindResourceA
LoadResource
LoadLibraryW
SizeofResource
CreateFileW
ExitThread
GetProcAddress
LockResource
VirtualProtect
CloseHandle
CreateThread
WriteConsoleW
SetFilePointerEx
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
RaiseException
SetLastError
GetCurrentThreadId
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FreeLibrary
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
VirtualQuery
shlwapi
StrStrW
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 978KB - Virtual size: 977KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ