Static task
static1
Behavioral task
behavioral1
Sample
a029c0c0349c92ddb760e371ac0703974affc9844bfdb7dc49d2edfbe49d7534.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a029c0c0349c92ddb760e371ac0703974affc9844bfdb7dc49d2edfbe49d7534.exe
Resource
win10v2004-20220812-en
General
-
Target
a029c0c0349c92ddb760e371ac0703974affc9844bfdb7dc49d2edfbe49d7534
-
Size
278KB
-
MD5
77952669bc1b7621d948aa1c178cfa00
-
SHA1
c0b6b229bf690a575408bc4feec8cf14f3ba5a15
-
SHA256
a029c0c0349c92ddb760e371ac0703974affc9844bfdb7dc49d2edfbe49d7534
-
SHA512
f6b94c7e42cbb6094f36a9e56130275510f244c7d4508190d53809ea299c673747dbf7aa9cd8fc4546853018311cd5e780222caad47d4266e0af9e315b4e27b1
-
SSDEEP
6144:FSaOw4mxUmuI0416ja/gmiSbm8SW8dSKefihU5umvP:FSu1uIFYja4mbmTWeSPihU5zP
Malware Config
Signatures
Files
-
a029c0c0349c92ddb760e371ac0703974affc9844bfdb7dc49d2edfbe49d7534.exe windows x86
a56d703c1e8951be30aebe8392a745f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
CloseHandle
WideCharToMultiByte
GetSystemTimeAsFileTime
GetLocaleInfoW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
GetLocalTime
LoadLibraryA
GetProcessHeap
SetLastError
FindResourceW
QueryPerformanceCounter
GetOEMCP
CreateFileA
HeapAlloc
GetTickCount
HeapFree
SystemTimeToFileTime
lstrcpyW
MultiByteToWideChar
lstrcmpA
fmifs
Chkdsk
Format
FormatEx
ComputeFmMediaType
EnableVolumeCompression
Extend
DiskCopy
w32topl
ToplScheduleCacheCreate
ToplSTHeapDestroy
ToplScheduleCreate
ToplScheduleExportReadonly
ToplSTHeapExtractMin
ToplSTHeapInit
ToplScheduleDuration
ToplScheduleCacheDestroy
Sections
.text Size: 270KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ