Static task
static1
Behavioral task
behavioral1
Sample
2afea0c5ac789dd3e3a4bd83e82b7149fbbaa7aef956938787f29910f327f090.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2afea0c5ac789dd3e3a4bd83e82b7149fbbaa7aef956938787f29910f327f090.exe
Resource
win10v2004-20220812-en
General
-
Target
2afea0c5ac789dd3e3a4bd83e82b7149fbbaa7aef956938787f29910f327f090
-
Size
14KB
-
MD5
c551ca24d5074e61dd7e361e0da8ea97
-
SHA1
563062b0fb520b3ae95c813938f8ae9d57e2b476
-
SHA256
2afea0c5ac789dd3e3a4bd83e82b7149fbbaa7aef956938787f29910f327f090
-
SHA512
65614cca1b9e8dbc21db6a6a6f6500e69fd371406a5fe1d3b4d498235070d845ced5b54a6efbbf7d60d3bee26973be4be80594516735723c24cd5cd14257bd0a
-
SSDEEP
384:vd6Q+yGagUsS7SFuNZiQbLEmYGtZ6Hn9:vd63yGabUQbLEmYGtZ
Malware Config
Signatures
Files
-
2afea0c5ac789dd3e3a4bd83e82b7149fbbaa7aef956938787f29910f327f090.exe windows x86
45b671f614ebe7b3eeb994afb8e2a609
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
FreeLibrary
LoadResource
SetFileTime
WriteFile
SizeofResource
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
LockResource
GetModuleFileNameA
GetFileTime
GetCurrentThreadId
GetVersionExA
CloseHandle
GetTempPathA
lstrlenA
FreeResource
SetFilePointer
CreateFileA
GetProcAddress
ExitProcess
user32
GetInputState
wsprintfA
PostThreadMessageA
GetMessageA
advapi32
OpenServiceA
StartServiceA
QueryServiceStatus
OpenSCManagerA
CloseServiceHandle
shell32
ShellExecuteExA
msvcrt
memset
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ