Static task
static1
Behavioral task
behavioral1
Sample
a02b2498d43dcc7ebc9fec6850dcef14c881596bb835d1743a0981c9fe73255c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a02b2498d43dcc7ebc9fec6850dcef14c881596bb835d1743a0981c9fe73255c.exe
Resource
win10v2004-20220812-en
General
-
Target
a02b2498d43dcc7ebc9fec6850dcef14c881596bb835d1743a0981c9fe73255c
-
Size
311KB
-
MD5
75abb4b3180aa26717c18cb195e20860
-
SHA1
9143b0ff9ef3bcb5a4c1c4663d80c1650b4dd368
-
SHA256
a02b2498d43dcc7ebc9fec6850dcef14c881596bb835d1743a0981c9fe73255c
-
SHA512
2340839e21f5396f0874f8f4a648334e4ac48d94944c96346d8b3d69a2daf4e93b805eb609a1c53de1ab7061c2044e34f96e0d356446841705903485d57b173d
-
SSDEEP
6144:blYMRrM8aMBqhMPr7Dty6YfwZW5aFy66Ql/aXUg9KqVOvu:xZa8NEMzf06YfwZW5cy6B/aXUSKR
Malware Config
Signatures
Files
-
a02b2498d43dcc7ebc9fec6850dcef14c881596bb835d1743a0981c9fe73255c.exe windows x86
a3c57a458efc258b61f28385bc507028
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntA
LocalFlags
GetFileAttributesW
CloseHandle
FindClose
GetStringTypeA
GetModuleHandleA
GetFileAttributesW
DeviceIoControl
VirtualProtectEx
RemoveDirectoryW
HeapFree
GlobalLock
GetCurrentProcess
CreateDirectoryW
GetVersionExA
GetPrivateProfileSectionA
CreateEventA
GetStdHandle
GetCurrentThread
SetLastError
user32
SetFocus
IsDialogMessageA
LoadCursorW
GetWindowLongW
PostMessageW
DispatchMessageA
IsWindow
GetWindowTextW
PeekMessageW
IsCharLowerA
SetCursorPos
wsprintfW
IsZoomed
ntmarta
AccConvertAclToAccess
AccFreeIndexArray
AccGetExplicitEntries
AccConvertSDToAccess
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ