Static task
static1
Behavioral task
behavioral1
Sample
a287112aa28f79305c0e21856d12370daeb2d85c014ad1c30de2a9fd55abc5ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a287112aa28f79305c0e21856d12370daeb2d85c014ad1c30de2a9fd55abc5ea.exe
Resource
win10v2004-20220812-en
General
-
Target
a287112aa28f79305c0e21856d12370daeb2d85c014ad1c30de2a9fd55abc5ea
-
Size
528KB
-
MD5
837ad59a91860d6526422fe341cf17c0
-
SHA1
7a92337e2aa2e8e99ac0fde0f3b718c48dd834e0
-
SHA256
a287112aa28f79305c0e21856d12370daeb2d85c014ad1c30de2a9fd55abc5ea
-
SHA512
3d7ff0824398e547e7ce837fb19256fe692dad9a26cc83b43d7f59ef29aa076d78fd2dffa4096617dfbe8895677d22fb07eb26d63da9080c5a9cab4bf1a743ee
-
SSDEEP
1536:35uq1cjwLc4dpguswg+OhFJpuzw7qwydiIqqq2IqIqqqTq3GYsRxBjGx:35uockxpJy+OhFJpuzwdQoGYsRxBjG
Malware Config
Signatures
Files
-
a287112aa28f79305c0e21856d12370daeb2d85c014ad1c30de2a9fd55abc5ea.exe windows x86
329dddd9977ed6f49ac54506ae76f5b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrIA
iphlpapi
GetAdaptersInfo
psapi
GetModuleFileNameExA
shell32
CommandLineToArgvW
ws2_32
gethostbyname
__WSAFDIsSet
WSAGetLastError
inet_addr
select
ioctlsocket
kernel32
ReadFile
EnterCriticalSection
VirtualFree
CreateThread
SetLastError
ExitProcess
GetCommandLineW
WideCharToMultiByte
GetFileAttributesA
CreateDirectoryA
WriteFile
CreateFileA
Sleep
DeleteFileA
VirtualAlloc
GetTickCount
GetProcAddress
LeaveCriticalSection
GetExitCodeProcess
InitializeCriticalSection
GetLastError
GetModuleHandleA
TerminateProcess
GetFileSize
user32
wsprintfA
IsCharAlphaNumericA
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ