Static task
static1
Behavioral task
behavioral1
Sample
a89fcdc88dab231c5719bc43107d30b951846f2725219403048191d6eb7ddde5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a89fcdc88dab231c5719bc43107d30b951846f2725219403048191d6eb7ddde5.exe
Resource
win10v2004-20220812-en
General
-
Target
a89fcdc88dab231c5719bc43107d30b951846f2725219403048191d6eb7ddde5
-
Size
126KB
-
MD5
9172d4371e1b7d7b0ffce6bdae8c28a2
-
SHA1
de810df95174a496dc79b7967f1b6f6686a3aa7e
-
SHA256
a89fcdc88dab231c5719bc43107d30b951846f2725219403048191d6eb7ddde5
-
SHA512
eb721880a54b1bfb69346d45cdfcd0633e4a595fcd875b89aaa85281e247885464bdf4097736d092af4c71a9d19e901f2f6269d27b9ba753270d52c81cfec3c2
-
SSDEEP
1536:rr+mxg/E6GQwWB1Gw7r620VU5m5z1jiHBF/cLjDxgTAmAiaKjMp5Jv41+D4cEf7g:F1+2N59iDcVQAmA1Tb1DdceB9
Malware Config
Signatures
Files
-
a89fcdc88dab231c5719bc43107d30b951846f2725219403048191d6eb7ddde5.exe windows x86
dd82c47dee7d9821bf581fde09d46bd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
TlsGetValue
CreateEventA
SetLastError
GetFileAttributesW
HeapFree
GetVersionExA
LocalFlags
GetCurrentProcess
CreateDirectoryW
GlobalLock
GetCurrentThread
VirtualProtectEx
GetLocaleInfoW
RemoveDirectoryW
GetExitCodeThread
GetPrivateProfileSectionA
GetFileAttributesW
FindClose
IsValidCodePage
GetModuleHandleA
user32
wsprintfW
DefDlgProcA
LoadCursorA
IsWindow
DispatchMessageA
SetFocus
SetCursorPos
IsDialogMessageA
GetWindowLongW
PeekMessageW
GetWindowTextW
PostMessageW
SetCursor
msdtcprx
DTC_XaCommit
DTC_XaOpen
DTC_XaStart
DTC_XaEnd
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE