Static task
static1
Behavioral task
behavioral1
Sample
a8ab0947a46cf3ced1a46ef1e0575d62686eb52f5e2e2d6b0108a0a581800c4a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8ab0947a46cf3ced1a46ef1e0575d62686eb52f5e2e2d6b0108a0a581800c4a.exe
Resource
win10v2004-20220812-en
General
-
Target
a8ab0947a46cf3ced1a46ef1e0575d62686eb52f5e2e2d6b0108a0a581800c4a
-
Size
232KB
-
MD5
4dae3f0f26975e9b3fc0ae127e8c2f00
-
SHA1
7766a77eeb0df8c5318db4dbced92522b9968094
-
SHA256
a8ab0947a46cf3ced1a46ef1e0575d62686eb52f5e2e2d6b0108a0a581800c4a
-
SHA512
1c2e7d9550ee5d36f9a961e7d6e4089157e01881cb1377f1c05b7e3208672168733f1a66cc2b908610275df6f1a912882a2d7d6921a6587332f50bfe27eb7180
-
SSDEEP
3072:Aga1eGQLoi7V21GU15KQZyz2Sxw0nCa1/bOnm8QtFEK+CI5PPfPCAatJ6wTBCXI:AB1eL0l1gdvw0FCm8QB+NPvvID
Malware Config
Signatures
Files
-
a8ab0947a46cf3ced1a46ef1e0575d62686eb52f5e2e2d6b0108a0a581800c4a.exe windows x86
4cad04a5e6fd88208c9c2c4005a9d04b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetVersionExA
GetCurrentProcess
TerminateProcess
GetLocalTime
GetLastError
MoveFileA
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
DeleteFileA
GetSystemTime
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
FlushFileBuffers
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTempPathA
LoadLibraryA
GetTimeZoneInformation
GetProcAddress
GetFileAttributesA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ