Static task
static1
Behavioral task
behavioral1
Sample
a5225212a8e5256c7ad7e5cb64400a4e241d1c968bd80af393c67c8bd01bbd64.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5225212a8e5256c7ad7e5cb64400a4e241d1c968bd80af393c67c8bd01bbd64.exe
Resource
win10v2004-20220901-en
General
-
Target
a5225212a8e5256c7ad7e5cb64400a4e241d1c968bd80af393c67c8bd01bbd64
-
Size
66KB
-
MD5
07a2f9fa9f82eac1ed10e92ed6e8725d
-
SHA1
bd201daa71fe7ad25cedfc0b6f0b0cb5005cc886
-
SHA256
a5225212a8e5256c7ad7e5cb64400a4e241d1c968bd80af393c67c8bd01bbd64
-
SHA512
8c7f4afcd4896ccf458b89813920ab9da04070ce68dee7bf00ff72e53ffa73c294ba5f6c43a236346142235b6e25660dc50adf248684253fb8a62f94265b15e6
-
SSDEEP
1536:JrdeolSqp/q0rVBUr5NTvJ3YZUcoOPu7agQJi/lU256pz:JtS8qes5NTvaPnPIhYz
Malware Config
Signatures
Files
-
a5225212a8e5256c7ad7e5cb64400a4e241d1c968bd80af393c67c8bd01bbd64.exe windows x86
f20ac17618b1da65318fb478165ead3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Heap32ListFirst
GetWindowsDirectoryW
CommConfigDialogW
GetConsoleAliasExesW
GetVolumeNameForVolumeMountPointA
VerSetConditionMask
FindNextVolumeMountPointW
CreateToolhelp32Snapshot
GlobalFlags
GetEnvironmentStringsA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE