Static task
static1
Behavioral task
behavioral1
Sample
a8d41418c49a1ecf283735988a48ec3d2ffc96cc834f0c7a575c720487b8a205.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8d41418c49a1ecf283735988a48ec3d2ffc96cc834f0c7a575c720487b8a205.exe
Resource
win10v2004-20220812-en
General
-
Target
a8d41418c49a1ecf283735988a48ec3d2ffc96cc834f0c7a575c720487b8a205
-
Size
234KB
-
MD5
6eb65302b0541535643650f80d849420
-
SHA1
fd81630cd662b82aa1613ceccc8a058852d27c30
-
SHA256
a8d41418c49a1ecf283735988a48ec3d2ffc96cc834f0c7a575c720487b8a205
-
SHA512
4852eb2cb0a56549ef8c41b3254561fc74f1e71887e586e6d14efa07046922c6c669b5d951114efa1cf611c393d2ec4e652e1517cd3d3a195cafee57a98a5645
-
SSDEEP
6144:SVgcDorOO86I7vwaA/IkqbgJqaVTTFc5otILEthmJGj:SjoioVjqgJqOTTFc5c4yhK
Malware Config
Signatures
Files
-
a8d41418c49a1ecf283735988a48ec3d2ffc96cc834f0c7a575c720487b8a205.exe windows x86
c7872a0a25283c076a0965a9c4a76bad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
CreateFileMappingA
LCMapStringW
GetCurrentThreadId
SetSystemPowerState
DeleteVolumeMountPointW
FindAtomW
SetFileTime
SetFileAttributesW
EnumUILanguagesA
GetCurrentProcessId
WritePrivateProfileSectionA
EnumDateFormatsA
FindNextVolumeMountPointW
GetModuleHandleW
ReplaceFileW
GetDiskFreeSpaceExW
Beep
IsProcessorFeaturePresent
FlushFileBuffers
DosDateTimeToFileTime
SetCalendarInfoA
GetBinaryTypeW
FindFirstVolumeW
lstrcmpW
user32
RegisterClipboardFormatA
SetDlgItemInt
GetMessageA
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.arch Size: 512B - Virtual size: 363B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 383B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE