Static task
static1
Behavioral task
behavioral1
Sample
a798ed5a280bc8f9b06ff4f7ab8ffc102338c2b774b50e6680358bb3e78d396a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a798ed5a280bc8f9b06ff4f7ab8ffc102338c2b774b50e6680358bb3e78d396a.exe
Resource
win10v2004-20220901-en
General
-
Target
a798ed5a280bc8f9b06ff4f7ab8ffc102338c2b774b50e6680358bb3e78d396a
-
Size
35KB
-
MD5
64ee123d5fe44ccb8804601d39dd6500
-
SHA1
eb3b9829493134dee4ec9fb0a0b54cd4b8531bdb
-
SHA256
a798ed5a280bc8f9b06ff4f7ab8ffc102338c2b774b50e6680358bb3e78d396a
-
SHA512
07383cf309cb88035b417a929456a6d49a90fa0e380e34e11d75f59305b621c8bc37371d54bbe0556d824f75cebae63248b510673ecc25d0a17a3ed1261a72d4
-
SSDEEP
384:u5sgo9fhgAkKS4LR+0NKZjm4lEgP1A/VEmMjI90stq+27DCtor/Js3C:nQA+7Zjm4zAvz90N7mWLJs3C
Malware Config
Signatures
Files
-
a798ed5a280bc8f9b06ff4f7ab8ffc102338c2b774b50e6680358bb3e78d396a.exe windows x86
dcfe29ddd213f386eab4929741d68c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PostQuitMessage
TranslateMessage
EndPaint
BeginPaint
DestroyWindow
DefWindowProcA
PostMessageA
SendMessageA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
LoadStringA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
kernel32
GetModuleHandleA
LoadLibraryA
GetCurrentDirectoryA
GetStartupInfoA
GetLocalTime
LoadResource
LockResource
FindResourceA
GetTimeFormatA
GetDateFormatA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
??2@YAPAXI@Z
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data2 Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ