Static task
static1
Behavioral task
behavioral1
Sample
a560f30855aff7f4d46297ddd73c41f14e93a4a1970d3915fcccabcab7a5dffd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a560f30855aff7f4d46297ddd73c41f14e93a4a1970d3915fcccabcab7a5dffd.exe
Resource
win10v2004-20220901-en
General
-
Target
a560f30855aff7f4d46297ddd73c41f14e93a4a1970d3915fcccabcab7a5dffd
-
Size
797KB
-
MD5
648e85812e77bd6086d952f8cf43af9c
-
SHA1
be4289350952f24827fc955be5c430759d167aba
-
SHA256
a560f30855aff7f4d46297ddd73c41f14e93a4a1970d3915fcccabcab7a5dffd
-
SHA512
97db7b6db1d4faf2cd82b51052a5584f0c8d5dd63b0e853d6bf2f4f00952a4baa7378eaeca8ed7a99055160add61609dd775ba2ead4d5978fb21c3613aecee6e
-
SSDEEP
12288:5iueNZqukrzTGjDWjTC6pZhxivYRo6mTl9CYXy+5+poNag4D/t9N5:5iuePk/TGjKjTdwQo6mTXCoyh79N5
Malware Config
Signatures
Files
-
a560f30855aff7f4d46297ddd73c41f14e93a4a1970d3915fcccabcab7a5dffd.exe windows x86
8a8df5cc9af89e2995ab9d40fc63e212
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetLocaleInfoA
ResetEvent
GetProcessHeap
CreateDirectoryA
MapViewOfFile
GetDriveTypeW
ReleaseMutex
CreateMailslotA
GetFileAttributesA
GetStdHandle
GetModuleHandleA
IsBadWritePtr
DeleteFileA
SetLocalTime
CancelIo
SetLastError
HeapSize
RemoveDirectoryA
WriteFile
VirtualProtect
user32
SetCursor
SetFocus
GetCapture
wsprintfA
GetCaretPos
LoadCursorA
PeekMessageA
LoadImageA
GetWindowTextW
PostMessageW
DestroyMenu
DispatchMessageA
GetWindowLongW
filemgmt
DllUnregisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ