Static task
static1
Behavioral task
behavioral1
Sample
f088aaf2b04622b8a2970087a2936ea494875eb144ce88fd8b8930c78833b48b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f088aaf2b04622b8a2970087a2936ea494875eb144ce88fd8b8930c78833b48b.exe
Resource
win10v2004-20220901-en
General
-
Target
f088aaf2b04622b8a2970087a2936ea494875eb144ce88fd8b8930c78833b48b
-
Size
28KB
-
MD5
a1dbf14bfd84ebbdd1e87867ddce83ff
-
SHA1
54d9d592f11a7bfa25307d6f4ec4ebe156ca8e20
-
SHA256
f088aaf2b04622b8a2970087a2936ea494875eb144ce88fd8b8930c78833b48b
-
SHA512
1aaa7ef0759cfbfc1a50784d896d874efc7e2bfbd57ebcd946d377b0d3783c3ba75af53b7054c4f178216b0f2ed6394b6dfe3a26b034a308677d613fc05d63ed
-
SSDEEP
384:WagPHaXP+QIrYUlNdCDX5WSPXVledv9IOcetIyx+fnZbt:mbYPFwdv9IItIyxuL
Malware Config
Signatures
Files
-
f088aaf2b04622b8a2970087a2936ea494875eb144ce88fd8b8930c78833b48b.exe windows x86
446f05780402e5de50dcbcf4dae3474b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
VirtualProtect
GetPrivateProfileIntA
GetNumberFormatW
lstrcpynA
SetCurrentDirectoryA
CreateEventW
TlsAlloc
UnmapViewOfFile
GetCurrentThread
GetModuleHandleA
lstrcpynA
GetModuleFileNameW
DeleteFileW
TlsAlloc
lstrcpynA
GetLocaleInfoW
TlsGetValue
GetStringTypeA
lstrlenA
lstrcpynA
GetFullPathNameA
lstrcpynA
wavemsp
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE