Static task
static1
Behavioral task
behavioral1
Sample
a12ee6a845f7a1811b7cf9a3d141ece3ea3788ce65e422b7a63b99918098b10c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a12ee6a845f7a1811b7cf9a3d141ece3ea3788ce65e422b7a63b99918098b10c.exe
Resource
win10v2004-20220901-en
General
-
Target
a12ee6a845f7a1811b7cf9a3d141ece3ea3788ce65e422b7a63b99918098b10c
-
Size
437KB
-
MD5
a09f57f3c6bf9d9564adc11ba4ca5680
-
SHA1
b591e5cb47ea52ff1301e1022d40db1ce6abe9a1
-
SHA256
a12ee6a845f7a1811b7cf9a3d141ece3ea3788ce65e422b7a63b99918098b10c
-
SHA512
32f9916254a35ee5d55249a1ba2341eb84c6a7e09f82d9e6fe29988dcf165b91cc642b465fc6df6beded3efaf88530bcae4bdc27cda5ff7a014941af240a1441
-
SSDEEP
12288:ZD7UTvhG+ZE56pb85AGDv3yvhI5pd9URgXkNA:p8vJZiYg5AGDvyvh8nr
Malware Config
Signatures
Files
-
a12ee6a845f7a1811b7cf9a3d141ece3ea3788ce65e422b7a63b99918098b10c.exe windows x86
6b96e9f3dc8ced048bdfd68071e4639d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeMountPointW
GetUserDefaultLCID
ntdll
ZwQueryMultipleValueKey
shell32
PifMgr_CloseProperties
oleaut32
VarDecAbs
user32
GetMenuCheckMarkDimensions
GetMessagePos
Sections
.text Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE