Static task
static1
Behavioral task
behavioral1
Sample
a94ceee8f021270ebb56ba890341b157627d1cdd80eb641243104ce128ff1cc5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a94ceee8f021270ebb56ba890341b157627d1cdd80eb641243104ce128ff1cc5.exe
Resource
win10v2004-20220812-en
General
-
Target
a94ceee8f021270ebb56ba890341b157627d1cdd80eb641243104ce128ff1cc5
-
Size
300KB
-
MD5
8447b166766bd4ddf0ba3d23e9fa1800
-
SHA1
8dc1b37b27cfd959b6242289f395fec6afb176dc
-
SHA256
a94ceee8f021270ebb56ba890341b157627d1cdd80eb641243104ce128ff1cc5
-
SHA512
e0bd2375d8c9e53f128b33a6f5a3a50b5901233b12eb3b2d3099330369bf9ab58301c5b76f6655ec8610cba78ac23e6894f1672fb046b2c68fe2f2dbd5b9e39e
-
SSDEEP
6144:Xwu3ZaetnpoCG5YotSDrkTG0qQPOpyNnVtrWT+WnSp9gK37jKgkKH:Xwu3Tnpo5EDreG0qQTnVtwlkgg7WgkU
Malware Config
Signatures
Files
-
a94ceee8f021270ebb56ba890341b157627d1cdd80eb641243104ce128ff1cc5.exe windows x86
48b415aa7b6dab8f426b2b519b6f7551
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
SetLastError
ReleaseMutex
GetProcessHeap
ResetEvent
GetPriorityClass
GetModuleHandleA
VirtualProtect
WriteFile
GetLocaleInfoA
GetDriveTypeA
IsBadWritePtr
DeleteFileA
CreatePipe
GetStdHandle
CreateDirectoryA
SetLocalTime
GetCommandLineA
HeapSize
ReadConsoleW
RemoveDirectoryA
user32
SetCursor
GetWindowTextW
PeekMessageA
SetFocus
DispatchMessageA
wsprintfA
DestroyMenu
GetCapture
GetCaretPos
GetWindowLongW
LoadCursorA
PostMessageA
DrawIcon
els
DllGetClassObject
DllRegisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ