Static task
static1
Behavioral task
behavioral1
Sample
a83cf55523d7c0a6461076d68298d4d954ebf9caa1b122ffdcd4c839eecf0733.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a83cf55523d7c0a6461076d68298d4d954ebf9caa1b122ffdcd4c839eecf0733.exe
Resource
win10v2004-20220901-en
General
-
Target
a83cf55523d7c0a6461076d68298d4d954ebf9caa1b122ffdcd4c839eecf0733
-
Size
190KB
-
MD5
1e05c5d3d450b6f662f61befe716e480
-
SHA1
6898cc7874013cc21e51843b28fb147e5dec7dfc
-
SHA256
a83cf55523d7c0a6461076d68298d4d954ebf9caa1b122ffdcd4c839eecf0733
-
SHA512
b435cee81a8aa0339048bbfcc8319e99f0e1931beb17ed4fd61ac475b1e2694999ec8baab293786858ea520c69ca380dd2ce79708a3673b22c80244ead7bca4a
-
SSDEEP
384:Dl5yXVENB57B9Yo1Ckpxn3rMV1JpdDlQQXoRFpE20yXKccL:Dl5yXVENB57ko1d3cDDloRFJ0yXKZL
Malware Config
Signatures
Files
-
a83cf55523d7c0a6461076d68298d4d954ebf9caa1b122ffdcd4c839eecf0733.exe windows x86
10204ff4db6547c34938438ee4d895ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
CoTaskMemFree
kernel32
GetTickCount
FindClose
FindFirstFileA
CloseHandle
lstrlenW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
CreateFileA
CreateFileMappingA
CreateThread
CreateToolhelp32Snapshot
DeleteFileA
lstrcmpA
lstrcatA
WriteFile
WideCharToMultiByte
UnmapViewOfFile
TerminateProcess
Sleep
Process32Next
Process32First
OpenProcess
MultiByteToWideChar
MapViewOfFile
LocalFree
LoadLibraryA
GlobalMemoryStatus
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
FindNextFileA
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetFileSize
GetDriveTypeA
GetDiskFreeSpaceA
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetComputerNameA
ExitProcess
user32
wsprintfA
GetDC
ReleaseDC
advapi32
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegEnumValueA
GetUserNameA
shlwapi
StrRChrA
StrStrIA
StrChrA
StrCmpNA
wsock32
closesocket
socket
send
recv
gethostname
connect
WSAStartup
rasapi32
RasEnumEntriesA
RasGetEntryPropertiesA
RasGetEntryDialParamsA
gdi32
GetDeviceCaps
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE