Static task
static1
Behavioral task
behavioral1
Sample
2aa982039c0f28eff7dafcb01ce2dd50ba1819895040c9cdafa320e49814b7f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2aa982039c0f28eff7dafcb01ce2dd50ba1819895040c9cdafa320e49814b7f5.exe
Resource
win10v2004-20220812-en
General
-
Target
2aa982039c0f28eff7dafcb01ce2dd50ba1819895040c9cdafa320e49814b7f5
-
Size
37KB
-
MD5
6e8a864596a15537b502025cc58d1dbd
-
SHA1
667c450e484e0ca903298149b5a763674a5eba6f
-
SHA256
2aa982039c0f28eff7dafcb01ce2dd50ba1819895040c9cdafa320e49814b7f5
-
SHA512
059892fe0636e4e667f1778bade365dec2aa719c30c0d0907615c892f57e435d84361d2b66d1bbb89d0e0464c2418b94517b95c18c32cdff014676242d1a594c
-
SSDEEP
768:1sg+JawpnfnXyyzJ9HvYsunSvwXxoTzmoIP5aqFtNWy7g6F/YjQGO5:1IJdpnfnXyyzXHQrmdfz25aqF7zSQ35
Malware Config
Signatures
Files
-
2aa982039c0f28eff7dafcb01ce2dd50ba1819895040c9cdafa320e49814b7f5.exe windows x86
a1c0efe9ff33640e6f286ee4a0e0e812
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetPrivateProfileStringW
ResumeThread
GetCurrentProcessId
GetModuleFileNameA
GetConsoleAliasW
EnterCriticalSection
EnumCalendarInfoW
ReadFile
SetLastError
GetModuleHandleA
GetCurrentThreadId
FindAtomW
LocalFree
GetNumberFormatW
TlsGetValue
lstrlenW
GetDriveTypeW
HeapCreate
FindClose
user32
GetKeyboardType
DrawTextW
GetCursorInfo
DispatchMessageA
IsWindow
GetKeyState
DispatchMessageA
GetMenuInfo
GetClassInfoA
CallWindowProcW
GetSysColor
SetFocus
GetClientRect
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ