Static task
static1
Behavioral task
behavioral1
Sample
a2fb7ac155bfc73ea03977ccbbf74c9da3babaaf9629b44030fd95ef5391ecd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2fb7ac155bfc73ea03977ccbbf74c9da3babaaf9629b44030fd95ef5391ecd0.exe
Resource
win10v2004-20220901-en
General
-
Target
a2fb7ac155bfc73ea03977ccbbf74c9da3babaaf9629b44030fd95ef5391ecd0
-
Size
29KB
-
MD5
a086836363f6a4a87870a4b95eda9dc7
-
SHA1
b049dbe1062f83e1b17d01d8932377b9b0ed2d8a
-
SHA256
a2fb7ac155bfc73ea03977ccbbf74c9da3babaaf9629b44030fd95ef5391ecd0
-
SHA512
26e5e7e21ce155c156c0d0065db6a329bc09833cc763004fa0ef88686420da9dc372a895ad76b2cbb78cc9ab2733fe3f73e69bb6db2e23693953d334ce53cf35
-
SSDEEP
384:xoyIpJvSYsJtR62xNWJkcWHMv4oaAYMnLrN4KwUgp3VbXD7l7c5laPGN7OcLgjIh:xoyILFGtR6knRsUl3Vr65lam7UIh
Malware Config
Signatures
Files
-
a2fb7ac155bfc73ea03977ccbbf74c9da3babaaf9629b44030fd95ef5391ecd0.exe windows x86
f70b71d7dda9115616168733332f6ebc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsnicmp
wcslen
wcscpy
_wcsicmp
wcscat
printf
malloc
free
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
MakeAbsoluteSD
RegCloseKey
IsValidSecurityDescriptor
MakeSelfRelativeSD
SetSecurityDescriptorDacl
AddAccessDeniedAce
AddAccessAllowedAce
InitializeAcl
GetAce
CreateWellKnownSid
LookupAccountNameW
GetLengthSid
GetSecurityDescriptorDacl
IsValidAcl
GetAclInformation
RegCreateKeyExW
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetLastError
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE