Static task
static1
Behavioral task
behavioral1
Sample
a793c88586e147f5eeccc6128d5432a4e3617c82a0d58341a8abba676484e049.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a793c88586e147f5eeccc6128d5432a4e3617c82a0d58341a8abba676484e049.exe
Resource
win10v2004-20220812-en
General
-
Target
a793c88586e147f5eeccc6128d5432a4e3617c82a0d58341a8abba676484e049
-
Size
142KB
-
MD5
00e816f9b0d4eabba22a5f02d4b0ada0
-
SHA1
e07b85c18fc103359a0025dbbf157d58d160685a
-
SHA256
a793c88586e147f5eeccc6128d5432a4e3617c82a0d58341a8abba676484e049
-
SHA512
ff06d8c7ebe2b85dbe3bf1c805afb2697b5cedb424becf51714a28b66cf5e89655c09490afdacb6a1c373944d54a3fe48c0aa5ee6696837b6d925b2ec7567401
-
SSDEEP
3072:40XR8oRsvRLn67vlk6BMyEdjayDiCJourmAP:4CRFsF67vWySJlZmAP
Malware Config
Signatures
Files
-
a793c88586e147f5eeccc6128d5432a4e3617c82a0d58341a8abba676484e049.exe windows x86
507ebb8311897a6f6061b61ffc92d268
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
GetCommandLineA
lstrlenA
CreateFileA
GetVersionExA
GetModuleFileNameA
MultiByteToWideChar
GetSystemDirectoryA
HeapFree
crtdll
__GetMainArgs
exit
raise
signal
ole32
CoGetClassObject
CoCreateInstance
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
user32
SetTimer
KillTimer
LoadStringA
DefWindowProcA
PostMessageA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 334B - Virtual size: 334B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ