Static task
static1
Behavioral task
behavioral1
Sample
a5f8a5aecedb2942315c322bafd3af63eca77883bf826c1422ef0a294b7ea629.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5f8a5aecedb2942315c322bafd3af63eca77883bf826c1422ef0a294b7ea629.exe
Resource
win10v2004-20220812-en
General
-
Target
a5f8a5aecedb2942315c322bafd3af63eca77883bf826c1422ef0a294b7ea629
-
Size
191KB
-
MD5
2b24215d70fca1e37afaf69d2c101776
-
SHA1
fd1ebb84c16a9bab3b324fc9bbc267241aff6c73
-
SHA256
a5f8a5aecedb2942315c322bafd3af63eca77883bf826c1422ef0a294b7ea629
-
SHA512
3edeb222bf01c8ad95df9b43b74092883bb8317709e31f1de1d2abea22bf6a14dcba3425f840dc221ed97761396b5985ec1fcc4dec81ab1d03b157214da0bf5b
-
SSDEEP
3072:LmePoKC2uzYh5cpK8dm3QZCRJzZ6RnZmxwNTJdRddc6knDNy+z+flizP8cxZ5jPN:VCDM2K8dgQZw88wNrRJQNy+z+t21vjN
Malware Config
Signatures
Files
-
a5f8a5aecedb2942315c322bafd3af63eca77883bf826c1422ef0a294b7ea629.exe windows x86
de6e847d00dd985aeff8479fe4536c2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateFileW
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathW
GetTickCount
LoadLibraryA
LocalAlloc
LocalFree
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WriteFile
lstrlenA
GetVersionExA
user32
GetDC
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassW
SetFocus
GetWindowRect
gdi32
DeleteDC
DeleteObject
GetClipBox
SelectObject
SetTextColor
GetDeviceCaps
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ