Static task
static1
Behavioral task
behavioral1
Sample
a221ce5a49ac8e5991b94d789b5a28c367bdd273386a8c750d4feed64ded370d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a221ce5a49ac8e5991b94d789b5a28c367bdd273386a8c750d4feed64ded370d.exe
Resource
win10v2004-20220812-en
General
-
Target
a221ce5a49ac8e5991b94d789b5a28c367bdd273386a8c750d4feed64ded370d
-
Size
316KB
-
MD5
0f79ad60574c26fc9e904a14d7b38978
-
SHA1
1e2f8ea21df2ee94dcf9c3a6c1c78480397905a9
-
SHA256
a221ce5a49ac8e5991b94d789b5a28c367bdd273386a8c750d4feed64ded370d
-
SHA512
f9311a8636415c24b8654231422a9882486f47e3ac04f4138d71e59a90226a56cd4f116c9ab6ed1e81caed493e8b60cd19b0a61c039dd5c66220e1df226c66d7
-
SSDEEP
6144:FKZd3NgUzVP6rNX+ZAQEqjbEY2L/iSiumcZrSf5G8LUu9d:c3Ngl5XGFgaDufZmfZH9d
Malware Config
Signatures
Files
-
a221ce5a49ac8e5991b94d789b5a28c367bdd273386a8c750d4feed64ded370d.exe windows x86
c864385d5140f90860569395804822e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExpandedNameA
GetCurrentProcess
HeapDestroy
IsDebuggerPresent
GetTimeFormatA
GetEnvironmentStringsA
HeapCreate
FormatMessageA
GetACP
GetThreadPriority
DeleteAtom
LoadLibraryA
VirtualProtect
GetCurrentProcessId
GetModuleHandleA
GetCurrentThread
InterlockedExchange
OpenSemaphoreA
FlushFileBuffers
WriteConsoleA
GetStdHandle
user32
GetWindow
ReleaseDC
GetFocus
GetClassNameA
ShowWindow
DrawTextA
wsprintfA
FillRect
BeginPaint
SetActiveWindow
FrameRect
GetWindowTextLengthA
SetForegroundWindow
ValidateRgn
GetCursorPos
GetParent
EndPaint
GetDlgItem
IsIconic
advapi32
RegFlushKey
RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegQueryInfoKeyA
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ