Static task
static1
Behavioral task
behavioral1
Sample
a295913d600f206c221a84faa49433486bc3d0ff599e06cc57b2137312cac8e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a295913d600f206c221a84faa49433486bc3d0ff599e06cc57b2137312cac8e8.exe
Resource
win10v2004-20220812-en
General
-
Target
a295913d600f206c221a84faa49433486bc3d0ff599e06cc57b2137312cac8e8
-
Size
726KB
-
MD5
6b89152085bae37a106a2bbf729c6570
-
SHA1
52405fc3e8204f6f7326bac135297b7e51dbe027
-
SHA256
a295913d600f206c221a84faa49433486bc3d0ff599e06cc57b2137312cac8e8
-
SHA512
73da76a57bf9a3b83230fa0311e6410659245b57aba629a643b2682087a814f29ff5ee368a2fcb4dd4d35479fdc6df78c5455c2ab62649d87b54b641b1af9732
-
SSDEEP
12288:WCLPAIC5zp8ukV9HPMu1tQ/U8RsKVx7VTnX1uSwYy8Jo6nldwfGXznvAP:WQAICZAHPMu1+/9RXVx7VTnXsAvfwf40
Malware Config
Signatures
Files
-
a295913d600f206c221a84faa49433486bc3d0ff599e06cc57b2137312cac8e8.exe windows x86
a2e579f862b43c0e8faf0d2521d06163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlCreateRegistryKey
NtSetInformationJobObject
RtlFinalReleaseOutOfProcessMemoryStream
advapi32
AccessCheckByTypeResultListAndAuditAlarmW
kernel32
GetSystemDefaultLangID
GetVolumePathNameA
ole32
MonikerCommonPrefixWith
oleaut32
VarUI2FromStr
user32
GetCursor
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE