Static task
static1
Behavioral task
behavioral1
Sample
102a022448bf23044bab4e5ed550a37f848f2619fc03a01013b4b92efecc62ad.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
102a022448bf23044bab4e5ed550a37f848f2619fc03a01013b4b92efecc62ad.exe
Resource
win10v2004-20220901-en
General
-
Target
102a022448bf23044bab4e5ed550a37f848f2619fc03a01013b4b92efecc62ad
-
Size
517KB
-
MD5
f48ee3fa0baa82bdc96b3749f64afa16
-
SHA1
b7741373da7db73245b4edc75025936f508953fd
-
SHA256
102a022448bf23044bab4e5ed550a37f848f2619fc03a01013b4b92efecc62ad
-
SHA512
e9430875c7498e3aa98e2ee42e0497a75cb6c16baa2ab53ff547281e988dd430ddf30f1b8f5a87248f975496251d22b2b6dc39934b2f601a9f59dc58666dcf1a
-
SSDEEP
12288:NMadZY1uVz5QLV1XiPsw06iEE6uWbj0C4zmMpay:NMaQsReuu6RE63b2N0y
Malware Config
Signatures
Files
-
102a022448bf23044bab4e5ed550a37f848f2619fc03a01013b4b92efecc62ad.exe windows x86
330ed4b8d1856f53161f13b8d10eca4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CreateMutexA
GetCurrentProcessId
CreateMailslotA
CopyFileA
lstrcatW
CreateEventA
GetTimeFormatA
GetPrivateProfileIntW
CompareStringA
GetVolumePathNameW
InterlockedDecrement
InterlockedIncrement
GetLogicalDrives
SetCurrentDirectoryW
DeleteFileA
GetModuleHandleA
GetStringTypeA
cryptui
WizardFree
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIWizExport
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JDATA Size: 501KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ