Static task
static1
Behavioral task
behavioral1
Sample
2a4bc28f575a165bfc2a6d0c6cdf807871eb2975c4204af7b481b80b4f4d68c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a4bc28f575a165bfc2a6d0c6cdf807871eb2975c4204af7b481b80b4f4d68c1.exe
Resource
win10v2004-20220812-en
General
-
Target
2a4bc28f575a165bfc2a6d0c6cdf807871eb2975c4204af7b481b80b4f4d68c1
-
Size
164KB
-
MD5
5b1741f7df3d32c7b5e9b3cacbb80309
-
SHA1
8e4cd211081891252b2159cbf2c15f62b6a34a90
-
SHA256
2a4bc28f575a165bfc2a6d0c6cdf807871eb2975c4204af7b481b80b4f4d68c1
-
SHA512
962a063130bd77a70debbe49454ca773769498a1bc6b8b41913e9c570e0333c5ae0e446dc7cf0c7cf99cbfa0ecf3ef7e1dd56909870df03f5eacda317c55f77a
-
SSDEEP
3072:32ibtbfDKiWbgq4Qf3kdsO0aZ7fsmxJdVVzQ5:3TF7SMyf3kdiaRkOVU
Malware Config
Signatures
Files
-
2a4bc28f575a165bfc2a6d0c6cdf807871eb2975c4204af7b481b80b4f4d68c1.exe windows x86
1849f41ee06ba7a7b5bc5d246fa12ab6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDesktopWindow
kernel32
VirtualAlloc
RtlMoveMemory
OpenProcess
lstrcmpiA
lstrcmpA
VirtualFree
lstrlenW
CopyFileA
Sections
.text Size: 512B - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Yjgur Ov Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ