Static task
static1
Behavioral task
behavioral1
Sample
0a595b9bf2f6766e104e5ace0086bca27b8919fd89bdd20173cc18707a6aa77d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a595b9bf2f6766e104e5ace0086bca27b8919fd89bdd20173cc18707a6aa77d.exe
Resource
win10v2004-20220812-en
General
-
Target
0a595b9bf2f6766e104e5ace0086bca27b8919fd89bdd20173cc18707a6aa77d
-
Size
810KB
-
MD5
0f51d2661ae92b06b48b6d267fb8bd49
-
SHA1
5482da35795349c00a7ce571a7ceac2f2bab9777
-
SHA256
0a595b9bf2f6766e104e5ace0086bca27b8919fd89bdd20173cc18707a6aa77d
-
SHA512
822b86600192ccccae39c2101778e8c0acb9422578e82b02f37683e086a8b1b5658fa57adbdb59173c231a296a97f2b2dfbc6cd19900403ccca164da94786980
-
SSDEEP
12288:St06Eo8fT4T7rda/3P5PJXcexmY77dEURSrBwB8V3GFhZhpEway4UlxO:enE9fkTlgPpJMevlys8w3X9a2lxO
Malware Config
Signatures
Files
-
0a595b9bf2f6766e104e5ace0086bca27b8919fd89bdd20173cc18707a6aa77d.exe windows x86
3e33dcd7c209400ceb1509cd3ecff1d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
DeleteFileW
CreateDirectoryA
GetModuleFileNameA
DeleteFileW
CancelIo
HeapDestroy
GetFileAttributesA
GetDriveTypeW
CreateFileW
LocalFree
GetConsoleAliasW
LeaveCriticalSection
SetLocalTime
CreateFileW
GetModuleHandleA
GetStartupInfoW
GetProcessHeap
GetCurrentThreadId
VirtualProtect
LocalLock
GetConsoleMode
ReadConsoleW
FindAtomA
GetFileTime
user32
GetWindowTextA
DispatchMessageA
GetWindowLongA
GetSysColor
IsZoomed
wsprintfA
GetKeyState
MessageBoxA
IsWindowEnabled
PeekMessageA
GetWindowLongA
LoadCursorA
GetWindowDC
davclnt
NPGetCaps
DllGetClassObject
DllCanUnloadNow
NPCloseEnum
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE