Static task
static1
Behavioral task
behavioral1
Sample
a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5.exe
Resource
win10v2004-20220414-en
General
-
Target
a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5
-
Size
2.1MB
-
MD5
9de8c58bce50d47be7ac227d4c0b1d57
-
SHA1
dc0aa1bf3ef425b40df474a3b7f49dbfe55950fc
-
SHA256
a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5
-
SHA512
469655b3a0bea6d160e02a291a9aef22d137e6e68bab12c8b5a2c94e33e40c25d11bc1946dc26aeda592af525103009b868556968ca2b656ac601626dcdaee78
-
SSDEEP
49152:ADMfobl8I7OvQU9tWCYDkEjs2Hxh1XkGyHj7IafVDPYqQW3Lv2XL:ADMAbl8I7OvQWWCYDk8HxX0GyD7IaftK
Malware Config
Signatures
Files
-
a19c22925856b0bae305967ac13e35babf31bd59c7e03662b71126f56ba041a5.exe windows x86
be8eb347704b261f68c71f7d3f555e65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
Sleep
SetFileTime
SetFilePointer
SetFileAttributesA
CopyFileA
DeleteFileA
FindFirstFileA
CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetModuleHandleA
LocalAlloc
TlsGetValue
TlsSetValue
TlsAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
ExitThread
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetOEMCP
GetProcAddress
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetVersionExA
GetCommandLineW
GetExitCodeProcess
InitializeCriticalSection
ResetEvent
SetEvent
VirtualFree
VirtualAlloc
WaitForMultipleObjects
LeaveCriticalSection
GetStdHandle
SetEndOfFile
ReadFile
GetFileSize
FindNextFileA
FindFirstFileW
FindClose
GetTempFileNameA
GetTempPathA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameW
GetFullPathNameA
DeleteFileW
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleFileNameA
IsDebuggerPresent
SetStdHandle
GetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
GetLocaleInfoA
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ