Static task
static1
Behavioral task
behavioral1
Sample
10a4db92b2a3b032922a073f52aca0979ac27b7989397242597ca91e2cab2ac2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10a4db92b2a3b032922a073f52aca0979ac27b7989397242597ca91e2cab2ac2.exe
Resource
win10v2004-20220901-en
General
-
Target
10a4db92b2a3b032922a073f52aca0979ac27b7989397242597ca91e2cab2ac2
-
Size
195KB
-
MD5
134b312bdbfad8054f7d4eba946e7f11
-
SHA1
e4adf854e5a364ec2aa901caa79b2462d8ce70f7
-
SHA256
10a4db92b2a3b032922a073f52aca0979ac27b7989397242597ca91e2cab2ac2
-
SHA512
7d57719d3b53db5f014815d6cda2144528e2436a9c416a586d87290536b6492ee0485055555f99628e0ace93c2e0448db1e494bb053637e4a9eb64821ab44000
-
SSDEEP
3072:wC05fG6cmj3kiSUCuiYw5+EhGfENo85ptog3Tl6zj62N0AAAerSZMAZHdXZL3Ezl:96abMrQcxe
Malware Config
Signatures
Files
-
10a4db92b2a3b032922a073f52aca0979ac27b7989397242597ca91e2cab2ac2.exe windows x86
df57a2a7b4b2e21a0b558c480222b82c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
CloseHandle
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
WriteFile
GetStdHandle
lstrlenA
lstrcatA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
lstrcmpiA
lstrcmpA
SetConsoleTitleA
GetVersionExA
SetEnvironmentVariableA
FindClose
FindFirstFileA
GetFullPathNameA
InterlockedIncrement
LocalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
CharNextA
DispatchMessageA
CharLowerA
GetMessageA
CharPrevA
PostThreadMessageA
LoadStringA
CharToOemA
TranslateMessage
wvsprintfA
ole32
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqhtstq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE