Static task
static1
Behavioral task
behavioral1
Sample
a5d8cd61261fc58f345350a8f8a62360d5ba1eeefc4f452f1b53c6121f823405.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5d8cd61261fc58f345350a8f8a62360d5ba1eeefc4f452f1b53c6121f823405.exe
Resource
win10v2004-20220812-en
General
-
Target
a5d8cd61261fc58f345350a8f8a62360d5ba1eeefc4f452f1b53c6121f823405
-
Size
233KB
-
MD5
a21183dfaffa8c5ed38736361f595ad0
-
SHA1
0ef244140f353ec4d49111ebd559ec333babf5f2
-
SHA256
a5d8cd61261fc58f345350a8f8a62360d5ba1eeefc4f452f1b53c6121f823405
-
SHA512
9bd1ceccfc64cd326507b18cc7895caa36999df75962a30f30eac61270d5c5d6a1e650ce28911b0883893d62d267e96f026942f51e9c0c8fe06720481f1146dd
-
SSDEEP
6144:66LsDKutG4s/6KBdHlaTp4bM0P9gqzeYru7:PLuKWA/6mdHlEiMyuq6+u
Malware Config
Signatures
Files
-
a5d8cd61261fc58f345350a8f8a62360d5ba1eeefc4f452f1b53c6121f823405.exe windows x86
c1373db5266bcdc9f0ee619e8b8a1e0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
GetStdHandle
GlobalUnlock
VirtualAlloc
GetSystemTimeAdjustment
FreeEnvironmentStringsA
EnterCriticalSection
Sleep
WaitForSingleObject
CreateThread
GetVersionExA
UnmapViewOfFile
VirtualFree
GetTickCount
WriteFile
VirtualProtect
DuplicateHandle
HeapFree
GetCurrentProcessId
SetEndOfFile
GetProcAddress
LoadLibraryA
TlsGetValue
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
RtlUnwind
HeapAlloc
SetFilePointer
FlushFileBuffers
HeapReAlloc
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ