Static task
static1
Behavioral task
behavioral1
Sample
a2c90bf78487246e894a9844581ff5be63fa26749be9e8b7bf8407b7b2ed593d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2c90bf78487246e894a9844581ff5be63fa26749be9e8b7bf8407b7b2ed593d.exe
Resource
win10v2004-20220812-en
General
-
Target
a2c90bf78487246e894a9844581ff5be63fa26749be9e8b7bf8407b7b2ed593d
-
Size
276KB
-
MD5
6d8dcb496be5dd1de75f372d5775de80
-
SHA1
459ff7987d23e3ea0a003c976f017a3eeb03a66a
-
SHA256
a2c90bf78487246e894a9844581ff5be63fa26749be9e8b7bf8407b7b2ed593d
-
SHA512
65687500a8376f8929e742c81f8ee5499c8f72f4ffb68619a5802b945c95c31db5e63944173427d6c536bd25d12f139ad37fbee7be980a7353ab2ef1f504134c
-
SSDEEP
6144:AS+AVCA7nwp++zIe9TnjHuGFYs/lk5+X48WacMmqeNSP0N30Hw:ARAVRwRIe9HVS+ZeV
Malware Config
Signatures
Files
-
a2c90bf78487246e894a9844581ff5be63fa26749be9e8b7bf8407b7b2ed593d.exe windows x86
0f51997ed20969cd85db362b2d8a91b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
Chkdsk
Extend
Format
EnableVolumeCompression
FormatEx
DiskCopy
ComputeFmMediaType
w32topl
ToplScheduleCreate
ToplSTHeapInit
ToplSTHeapDestroy
ToplSTHeapExtractMin
ToplScheduleCacheCreate
ToplScheduleCacheDestroy
ToplScheduleExportReadonly
ToplScheduleDuration
kernel32
QueryPerformanceCounter
SetUnhandledExceptionFilter
GlobalFindAtomA
lstrcpyW
LoadLibraryA
CloseHandle
WideCharToMultiByte
GetOEMCP
lstrcmpA
HeapAlloc
GetLocalTime
GetCurrentProcessId
MultiByteToWideChar
GetTickCount
GetSystemTimeAsFileTime
lstrlenW
GetCurrentProcess
FindResourceW
HeapFree
GetLocaleInfoW
GetProcessHeap
SetLastError
CreateFileA
SystemTimeToFileTime
Sections
.text Size: 271KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ