Static task
static1
Behavioral task
behavioral1
Sample
a4fb89b39f473e2b3588f31ca4218fc684947df24a78d62e89a555572e3af692.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4fb89b39f473e2b3588f31ca4218fc684947df24a78d62e89a555572e3af692.exe
Resource
win10v2004-20220812-en
General
-
Target
a4fb89b39f473e2b3588f31ca4218fc684947df24a78d62e89a555572e3af692
-
Size
304KB
-
MD5
82e6b6ffcb909954a1396b3e6e1a3800
-
SHA1
3238d57dd5187bc62ec8c78caa9fd5b8d6eb3ee8
-
SHA256
a4fb89b39f473e2b3588f31ca4218fc684947df24a78d62e89a555572e3af692
-
SHA512
ee4d1d114e7ee4cdf26a8a5d3ded1f979db50f1a1550adac9d2dcc97dee3586d2a3e62f4590ebcf28efde7aa01fda2f1a8b0637d0a9bc64bb6df723c62c0cb38
-
SSDEEP
6144:uqfHYsJBjNN9QoLfZ5Lc3YTI7ibedLNXZ/:ug4cj9Qol9VbS5N
Malware Config
Signatures
Files
-
a4fb89b39f473e2b3588f31ca4218fc684947df24a78d62e89a555572e3af692.exe windows x86
6d694b0b4afc1d8aab005f8e229fcc74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
ReadFile
ExitThread
GetFileSize
ResumeThread
GetStdHandle
SetFilePointer
GetCurrentProcessId
WriteFile
GetCurrentDirectoryA
CloseHandle
GetSystemDirectoryA
GetVersionExA
SetEvent
CreateFileA
lstrcpyA
GetCurrentProcess
SuspendThread
WaitForSingleObject
VirtualFree
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
VirtualAlloc
ExitProcess
LocalAlloc
LoadLibraryA
CreateThread
GetComputerNameA
lstrlenA
advapi32
GetUserNameA
user32
FindWindowA
PostMessageA
SendMessageA
GetWindow
GetForegroundWindow
GetSystemMetrics
RegisterClassA
ShowWindow
GetClassInfoExA
MessageBoxA
GetActiveWindow
ole32
CoInitialize
Sections
.text Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ