Static task
static1
Behavioral task
behavioral1
Sample
a8c5558a8895c40461fdf57f1fd77d1bd0c5295e28b1a98d34ba7fd5515baea3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8c5558a8895c40461fdf57f1fd77d1bd0c5295e28b1a98d34ba7fd5515baea3.exe
Resource
win10v2004-20220812-en
General
-
Target
a8c5558a8895c40461fdf57f1fd77d1bd0c5295e28b1a98d34ba7fd5515baea3
-
Size
205KB
-
MD5
9083cd1aba0c5a060e77604918d3fb67
-
SHA1
2cc12dc17774623eb09f314020a7a8552a3945bf
-
SHA256
a8c5558a8895c40461fdf57f1fd77d1bd0c5295e28b1a98d34ba7fd5515baea3
-
SHA512
699ee01ab6b999b8e88d79cfc4876240fa1a376dcc5aa6e31986dd3e751e12e76d744750504d9467d058bd1a79fba7eb143aad7caa1e675dc8d7522e0790d596
-
SSDEEP
6144:sVO3FTIaqEGtJqp44F2iEOU0zs88YJwJw:KsvzcJPiED0862w
Malware Config
Signatures
Files
-
a8c5558a8895c40461fdf57f1fd77d1bd0c5295e28b1a98d34ba7fd5515baea3.exe windows x86
790bbc27cd459356fb025a57135ea007
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
SetUnhandledExceptionFilter
lstrcmpA
MultiByteToWideChar
GetCurrentProcessId
LoadResource
HeapAlloc
CreateFileA
lstrcpyA
FreeResource
GetProcessHeap
WideCharToMultiByte
GetLocalTime
GetTickCount
LoadLibraryW
SetLastError
GetVolumeInformationA
DeviceIoControl
QueryDosDeviceA
LockResource
lstrlenA
SystemTimeToFileTime
GetSystemTimeAsFileTime
CloseHandle
FindResourceA
GetCurrentProcess
HeapFree
user32
wsprintfA
CharNextA
advapi32
RegOpenKeyW
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA
pautoenr
CertAutoEnrollment
CertAutoRemove
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ