Static task
static1
Behavioral task
behavioral1
Sample
c1aa6a397a7634e27f34c5f60e269b6df9e6bd8aa6e04e47a1dec0e8d88a223f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1aa6a397a7634e27f34c5f60e269b6df9e6bd8aa6e04e47a1dec0e8d88a223f.exe
Resource
win10v2004-20220901-en
General
-
Target
c1aa6a397a7634e27f34c5f60e269b6df9e6bd8aa6e04e47a1dec0e8d88a223f
-
Size
282KB
-
MD5
0d34f79b736187822aaeebea1ec8a2dd
-
SHA1
e7eedbcf121529aaaa997ec7e30f20b9c48b97a0
-
SHA256
c1aa6a397a7634e27f34c5f60e269b6df9e6bd8aa6e04e47a1dec0e8d88a223f
-
SHA512
45acbb4bb621d4811829a24c25c3d532cb72f784153c69614b5baf673d1930365e64f6453e222eae4643840a6ce4307673736aaa01b484604743c530e3c393fc
-
SSDEEP
6144:1qO0ZP51MV9X0SbguTmmSNLZGH1am5hY6c2UuXXM8ZrUBvBc:21MV9EH0m73Qkm5GKUgX7rUh
Malware Config
Signatures
Files
-
c1aa6a397a7634e27f34c5f60e269b6df9e6bd8aa6e04e47a1dec0e8d88a223f.exe windows x86
8262905b4d3d9c8f076e15b1f2d3bb86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentProcessId
SetConsoleCP
VirtualProtect
HeapAlloc
MoveFileW
GetCommandLineW
SetThreadPriority
WriteFile
GetOEMCP
LocalReAlloc
GetACP
TlsFree
SetHandleCount
GetTickCount
GetCurrentThreadId
GetModuleHandleA
SetStdHandle
GetCommandLineA
Sleep
GetStartupInfoA
MultiByteToWideChar
ExitProcess
WideCharToMultiByte
lstrcpynA
GetVersion
GlobalAlloc
gdi32
SetTextColor
user32
MessageBoxW
GetSystemMenu
GetWindowRect
CopyRect
ole32
CoTestCancel
lz32
LZClose
msvcrt
_initterm
version
VerQueryValueA
advapi32
RegSetValueExA
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 214KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ