Static task
static1
Behavioral task
behavioral1
Sample
a7a43556852af9c7e5a0086a510ed1bfe384899e496e6f6ee87d8d0acdee4a54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7a43556852af9c7e5a0086a510ed1bfe384899e496e6f6ee87d8d0acdee4a54.exe
Resource
win10v2004-20220812-en
General
-
Target
a7a43556852af9c7e5a0086a510ed1bfe384899e496e6f6ee87d8d0acdee4a54
-
Size
799KB
-
MD5
13211a098976daf5997a2c683cccfa80
-
SHA1
204f524974595624b89d86cec59abb6e9a41cc6d
-
SHA256
a7a43556852af9c7e5a0086a510ed1bfe384899e496e6f6ee87d8d0acdee4a54
-
SHA512
6f40efc4cead1e38ebd42ed4e87eef052a5e25b9995ff1978ca381ea9f79eeb3e5cf72536cbf708d83f35fc0e0edd5c84e85973dda53f2b2931023c8bb6ebc99
-
SSDEEP
24576:kwAUPZGO7FdgUPTUqoM4nlnT54tWzhTUK:kwbGOJdXMM41T54cxj
Malware Config
Signatures
Files
-
a7a43556852af9c7e5a0086a510ed1bfe384899e496e6f6ee87d8d0acdee4a54.exe windows x86
5db616f710a0d0d190bf2a8408d767d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedExchange
ResumeThread
IsValidLocale
GetCurrentThreadId
SetFilePointer
VirtualProtect
CreateFileW
SuspendThread
HeapDestroy
lstrlenA
OpenEventW
CreateDirectoryA
GetModuleHandleA
CreateFileW
SetEvent
GetVersionExA
LocalFlags
CreateMutexW
GetModuleFileNameA
GetStdHandle
LeaveCriticalSection
GetLocaleInfoA
GetFileAttributesW
AddAtomW
GetTickCount
user32
SetRect
GetWindowLongA
DestroyIcon
IsMenu
GetWindowLongA
MessageBoxW
DispatchMessageA
PeekMessageA
LoadCursorA
wsprintfA
IsMenu
DestroyMenu
GetWindowTextA
dpnet
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
advapi32
IsValidAcl
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE