Static task
static1
Behavioral task
behavioral1
Sample
2a5db806cc970846a9ab7e938782f1d4e6d9a30d8d5ea8588425cae54303d388.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a5db806cc970846a9ab7e938782f1d4e6d9a30d8d5ea8588425cae54303d388.exe
Resource
win10v2004-20220812-en
General
-
Target
2a5db806cc970846a9ab7e938782f1d4e6d9a30d8d5ea8588425cae54303d388
-
Size
113KB
-
MD5
02947188346db4ded436ca052fc454c0
-
SHA1
f3ac0c4c2edeef84cf8863ef2a70eb4dd5aa78d2
-
SHA256
2a5db806cc970846a9ab7e938782f1d4e6d9a30d8d5ea8588425cae54303d388
-
SHA512
94a9cd93b3a82a6548d365106d17effa8b116943827ea4252ac23865d753f7f8bbda7a0f45a2aabcc6110c00f4ad50db2315665d269209edf4e9e104adc70c66
-
SSDEEP
1536:g03ZcnrGkuEDj1b5YKhs1kz7ROMBuOavKZGnd350rUKuAU:n3cRRbsO7ROMQvft5GUKDU
Malware Config
Signatures
Files
-
2a5db806cc970846a9ab7e938782f1d4e6d9a30d8d5ea8588425cae54303d388.exe windows x86
e87f78ecaebcfa85081f3a40b6b2230a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
DeleteFileW
GetCPInfo
lstrlenA
GlobalFree
GetLastError
DeleteFileA
FlushFileBuffers
WriteFile
OpenFileMappingA
CopyFileA
ExitThread
lstrcatA
CopyFileExA
HeapFree
CreateDirectoryA
HeapAlloc
GetLocalTime
FreeResource
advapi32
RegQueryInfoKeyW
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyW
RegQueryValueW
RegDeleteValueW
user32
DrawTextW
EndDialog
CreateIcon
InsertMenuA
Sections
.gh7g Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.379f Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.38d8e Size: 55KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.26ca Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adb4 Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ