Static task
static1
Behavioral task
behavioral1
Sample
a82ab24d6c97af28e44659bf928079b72f58124eaf55a0758f28c1ebe31e4d55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a82ab24d6c97af28e44659bf928079b72f58124eaf55a0758f28c1ebe31e4d55.exe
Resource
win10v2004-20220812-en
General
-
Target
a82ab24d6c97af28e44659bf928079b72f58124eaf55a0758f28c1ebe31e4d55
-
Size
73KB
-
MD5
655576652d06201632358f67a26c34e0
-
SHA1
c8688c606f7f3f9a218b33b28912ccacb68269cd
-
SHA256
a82ab24d6c97af28e44659bf928079b72f58124eaf55a0758f28c1ebe31e4d55
-
SHA512
bacda8cf65fd60282dd0879182fa577bee4b039d9857b529404e6e974ac3345a168229e33bf2f0e7c5ad508a212fa7503bcd2bffbe4a3fd6ed39c525b91a92d5
-
SSDEEP
1536:YdfwlFS4s4q0lA9QSAHx4pArhOSFyByvN/E0y2oEjQZtJ:de4Ac6pOhOP2/dyuUZtJ
Malware Config
Signatures
Files
-
a82ab24d6c97af28e44659bf928079b72f58124eaf55a0758f28c1ebe31e4d55.exe windows x86
6eb622a938505876faf9ac278f2f5b91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
memcpy
memmove
sqrt
swprintf
calloc
wcsncmp
rand
clock
ole32
CoCreateFreeThreadedMarshaler
kernel32
GetCurrentProcessId
lstrcmpiA
VirtualAlloc
GetFullPathNameA
DeleteFileA
GetCurrentThreadId
VirtualFree
GetOEMCP
GetACP
GetLastError
GlobalAlloc
GetCPInfo
FindClose
GetCommandLineA
LoadLibraryA
CompareStringA
ExitProcess
LocalAlloc
GetCurrentProcess
HeapAlloc
VirtualAllocEx
GetCurrentThread
HeapDestroy
lstrcmpA
GetLocalTime
DeleteCriticalSection
LocalReAlloc
Sections
.init Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 57KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 371B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ