Static task
static1
Behavioral task
behavioral1
Sample
a2298fc528562956b24332c5f748afb8e164eb556859f392169b2e68d18e188c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a2298fc528562956b24332c5f748afb8e164eb556859f392169b2e68d18e188c.exe
Resource
win10v2004-20220812-en
General
-
Target
a2298fc528562956b24332c5f748afb8e164eb556859f392169b2e68d18e188c
-
Size
104KB
-
MD5
539590d29f19feaf6e46a0a03a793b70
-
SHA1
37803ef3dd9b196cc83c9393769ac0a97db7ca6d
-
SHA256
a2298fc528562956b24332c5f748afb8e164eb556859f392169b2e68d18e188c
-
SHA512
5b7c3b827297e86ec033048dd6bcf5b78f0511cd6e1eb0f216c9230406fd148f81ea541b0780f47f08bccbe7df14ddbc38c5f3b955dd8e1ee4fa5ea8bf364ca1
-
SSDEEP
768:bl1FQyMeBGjySSMr59mWbrFv3Ooacjj8SeXA6Zpf97GzIk1db:zKyMU8yCgWXgo1jj5ew6Zl97
Malware Config
Signatures
Files
-
a2298fc528562956b24332c5f748afb8e164eb556859f392169b2e68d18e188c.exe windows x86
f9641300fdd257c762b1a67865c98214
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CopyFileA
DeleteFileA
GetLastError
OpenFileMappingA
GetFileType
GetCommandLineA
ReadFile
GetCPInfo
GetFileTime
CompareStringA
HeapFree
FlushFileBuffers
HeapAlloc
lstrlenA
GlobalFree
FreeResource
ExitThread
DeleteFileW
GetLocalTime
CopyFileExA
OpenFile
ExitProcess
user32
CreateIcon
DrawTextW
AppendMenuW
IsMenu
CloseWindow
DialogBoxParamW
advapi32
RegEnumKeyW
RegEnumKeyExW
RegQueryValueA
RegDeleteKeyW
RegCreateKeyExW
Sections
.8c3g5 Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.db54 Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ah5c Size: 60KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.61d7d Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ