Static task
static1
Behavioral task
behavioral1
Sample
a019225b281e3ec08d7626928b146e5322cec0d0f6121c9d76209b72421af631.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a019225b281e3ec08d7626928b146e5322cec0d0f6121c9d76209b72421af631.exe
Resource
win10v2004-20220901-en
General
-
Target
a019225b281e3ec08d7626928b146e5322cec0d0f6121c9d76209b72421af631
-
Size
100KB
-
MD5
75d2577f5dc7aeb8aba9b7827e475ef0
-
SHA1
d8a7105f9ae0e72679b896d7cb30970082519cf8
-
SHA256
a019225b281e3ec08d7626928b146e5322cec0d0f6121c9d76209b72421af631
-
SHA512
72132ebcdfef10fff56ff3bde65dce92302ac30bcc7b8bf02858fde345a713f20ec294cc261d493eedcac5f6837c8330c4aac5f898dc462a7bcec2ef7999663d
-
SSDEEP
768:qjDeGcQVZz2vkiU5s2ZGZ1W1JTIrUFNlDvqpdjC8EDrofxPHRWqSLm3WTPQzGcFc:qOny6vkiUy2ueJMrUFnDvEd2xoR0qM0C
Malware Config
Signatures
Files
-
a019225b281e3ec08d7626928b146e5322cec0d0f6121c9d76209b72421af631.exe windows x86
93ce9216e65857d3b5a3408b93eafedf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
FindFirstFileA
lstrcpyA
lstrlenA
GetModuleFileNameA
CreateDirectoryA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
WaitForSingleObject
CreateProcessA
lstrcatA
TerminateProcess
HeapDestroy
HeapCreate
GetStringTypeW
GetStringTypeA
LCMapStringA
SetEndOfFile
LCMapStringW
GetProcAddress
SetEnvironmentVariableA
LoadLibraryA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
ReadFile
GetLastError
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
SetUnhandledExceptionFilter
WideCharToMultiByte
WriteFile
SetStdHandle
GetEnvironmentStringsW
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetACP
GetOEMCP
FlushFileBuffers
CreateFileA
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
user32
MessageBoxA
SendMessageA
ShowWindow
CreateDialogParamA
SetCursor
UpdateWindow
LoadCursorA
GetDlgItem
DestroyWindow
wsprintfA
comctl32
ord17
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE