Static task
static1
Behavioral task
behavioral1
Sample
a856efb44b814203a5ed11242999f21dad565f8d17cb2f68e8e2d42a89da21b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a856efb44b814203a5ed11242999f21dad565f8d17cb2f68e8e2d42a89da21b5.exe
Resource
win10v2004-20220812-en
General
-
Target
a856efb44b814203a5ed11242999f21dad565f8d17cb2f68e8e2d42a89da21b5
-
Size
44KB
-
MD5
f526e2b8c7746c95daaf812d929254e7
-
SHA1
02b7102cc41a31a1cfc0c2230bad4cc63d5ca4ea
-
SHA256
a856efb44b814203a5ed11242999f21dad565f8d17cb2f68e8e2d42a89da21b5
-
SHA512
701cadfc10d052668e01c6453ccf482434ca5c803281b277be219818f38273e53b11291ea6503682557630a1fa331445f4658e59416ea47858088531572fbf7e
-
SSDEEP
384:mCeHAThqKWuURxJ3I/LxlVh/gBR2TewWe3Ve4tgGB3Lf10xPzD5C51A:WAThqtRr49zhYXmewWeBJ1Q5C51
Malware Config
Signatures
Files
-
a856efb44b814203a5ed11242999f21dad565f8d17cb2f68e8e2d42a89da21b5.exe windows x86
fe7816f6bef6e4bf2e64eb9c4bdc2588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
icm32
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
dbghelp
FindDebugInfoFile
FindDebugInfoFile
kernel32
GetWindowsDirectoryA
CreateFileA
ExitProcess
ReadFile
GetACP
GetTickCount
ReadConsoleA
olepro32
OleCreateFontIndirect
OleCreateFontIndirect
crypt32
CertCloseStore
CertCloseStore
CertCloseStore
Sections
txt Size: 7KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data3 Size: 5KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.resr Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ