Static task
static1
Behavioral task
behavioral1
Sample
a94ee05bd0d6fb70041987f4fe99c200e476035a6a2090b1db345a31ab7830be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a94ee05bd0d6fb70041987f4fe99c200e476035a6a2090b1db345a31ab7830be.exe
Resource
win10v2004-20220901-en
General
-
Target
a94ee05bd0d6fb70041987f4fe99c200e476035a6a2090b1db345a31ab7830be
-
Size
220KB
-
MD5
09d3095975e9e0afe29c641f9e89eec0
-
SHA1
6e825fa11d6ff134c1f7a9a80d7501257859ed56
-
SHA256
a94ee05bd0d6fb70041987f4fe99c200e476035a6a2090b1db345a31ab7830be
-
SHA512
7572caca3f7ed1bb93349b7cbc106d8fa167d6bf0a2d2c889946d3b4fbd91e7cf529b6c6e589f85c38e0cb51ab72512ccb3d8f4031514abfb598bcf7a1612c2e
-
SSDEEP
6144:9hqn0UU51BhdVmyBqEWTrfXPyQJcqFOcHw:9hIU51BhiDTfyQJR
Malware Config
Signatures
Files
-
a94ee05bd0d6fb70041987f4fe99c200e476035a6a2090b1db345a31ab7830be.exe windows x86
67e28f81123bf500cf72497ef2f7d414
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WideCharToMultiByte
lstrcpyA
IsBadHugeReadPtr
VirtualAllocEx
VirtualQuery
ExitProcess
LoadLibraryA
GetLastError
VirtualAlloc
WriteFile
ExitThread
GetProcAddress
lstrlenW
IsBadReadPtr
WaitForSingleObject
LoadLibraryExA
GetModuleHandleW
VirtualFree
GetModuleHandleA
Sections
CODE Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 695B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ