Static task
static1
Behavioral task
behavioral1
Sample
a204b2815e404cb0d86087ee66c70a3aad89849364d89f157af1402e1d59e039.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a204b2815e404cb0d86087ee66c70a3aad89849364d89f157af1402e1d59e039.exe
Resource
win10v2004-20220812-en
General
-
Target
a204b2815e404cb0d86087ee66c70a3aad89849364d89f157af1402e1d59e039
-
Size
64KB
-
MD5
11abee4c9db3a02b5ca566fa884e6b00
-
SHA1
555f8ee077f4546f95e03c742d9df47970273b47
-
SHA256
a204b2815e404cb0d86087ee66c70a3aad89849364d89f157af1402e1d59e039
-
SHA512
feb6f60cbdbc00ade0dde30770b67cb46997fc2ed91370f1c7d13d9f34a74682b85975144cb3b67ddb6d9f59811c6d7da58912d33f1e26ff5b9b579fb7f2b60d
-
SSDEEP
1536:WO1nZi/WnzKAdRSFY3v6JixuqsWb2GXcobKi8t/L:WOFmkP6+QixuXWNghL
Malware Config
Signatures
Files
-
a204b2815e404cb0d86087ee66c70a3aad89849364d89f157af1402e1d59e039.exe windows x86
ce9dacacc0e553a7d077dc08e3881abc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DisconnectNamedPipe
GetPriorityClass
CreatePipe
lstrlenW
lstrcpyA
GetProcessHeap
GetModuleHandleA
GetCurrentDirectoryA
CopyFileA
WriteConsoleW
DeleteFileA
SetEvent
GetStdHandle
HeapDestroy
GetCommandLineA
VirtualProtect
GetStartupInfoA
ResumeThread
WriteConsoleW
GetFileAttributesW
WriteConsoleW
mmcndmgr
DllUnregisterServer
DllUnregisterServer
DllRegisterServer
DllRegisterServer
shell32
ExtractIconA
SHGetSettings
StrChrA
DragAcceptFiles
ShellMessageBoxA
DragQueryFileA
DllUnregisterServer
DuplicateIcon
DragFinish
SHFree
SHGetDiskFreeSpaceA
SHGetMalloc
ShellAboutA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE