Static task
static1
Behavioral task
behavioral1
Sample
2a090d47cb11bfe55b5aa26e831a59b14ab923646aff678567253fd4f3d606db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a090d47cb11bfe55b5aa26e831a59b14ab923646aff678567253fd4f3d606db.exe
Resource
win10v2004-20220812-en
General
-
Target
2a090d47cb11bfe55b5aa26e831a59b14ab923646aff678567253fd4f3d606db
-
Size
237KB
-
MD5
115a537917f5bdfd5475770a5fe60600
-
SHA1
02c1f909a987eb71b0fbe3ef9cc57e684aeadbba
-
SHA256
2a090d47cb11bfe55b5aa26e831a59b14ab923646aff678567253fd4f3d606db
-
SHA512
c7bbc710d132db7c505e3251242ca5f8548cc6078eecead961228c16fdd77eb92a779dfbdbabb17981fd397ba8e32dd7265ce9ace2ea4eaf172b78b5dfe91bc4
-
SSDEEP
6144:KT5vVD9f1bZNSW6TYDb356vg2cYE5Jje4aL4r941PywNWy:KThVDZVZgW4YDb3g46Ebje464B8yNy
Malware Config
Signatures
Files
-
2a090d47cb11bfe55b5aa26e831a59b14ab923646aff678567253fd4f3d606db.exe windows x86
b453d6c4c5357a613e97d71453097ec3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekNamedPipe
CreateSemaphoreW
EnumCalendarInfoExA
ResetEvent
ReadFileEx
CreateMemoryResourceNotification
LoadLibraryA
InterlockedPushEntrySList
InterlockedFlushSList
HeapWalk
GetTapeParameters
GetProfileStringA
GetProcessWorkingSetSize
ExitProcess
EraseTape
EnumerateLocalComputerNamesW
user32
SetTimer
PostQuitMessage
GrayStringA
GetDlgItemInt
GetDesktopWindow
GetActiveWindow
DrawFocusRect
CharToOemA
ToUnicodeEx
advapi32
RegSetValueW
ConvertStringSidToSidA
CredIsMarshaledCredentialW
GetInformationCodeAuthzLevelW
GetMultipleTrusteeA
SetThreadToken
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetNamedSecurityInfoExA
BuildExplicitAccessWithNameA
RegQueryMultipleValuesW
QueryServiceStatusEx
QueryServiceConfig2W
GetSidSubAuthorityCount
GetSecurityInfoExA
gdi32
FrameRgn
GetCharWidth32W
GetClipBox
SetTextJustification
CreatePolyPolygonRgn
InvertRgn
LineTo
PlayEnhMetaFile
RoundRect
SelectFontLocal
GetCurrentPositionEx
ntdll
ZwAllocateVirtualMemory
RtlTimeToTimeFields
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ