Static task
static1
Behavioral task
behavioral1
Sample
0a823a7a908effa848622f8573abedf9dca0afad27f841bc1e1815f2aba14bea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a823a7a908effa848622f8573abedf9dca0afad27f841bc1e1815f2aba14bea.exe
Resource
win10v2004-20220812-en
General
-
Target
0a823a7a908effa848622f8573abedf9dca0afad27f841bc1e1815f2aba14bea
-
Size
120KB
-
MD5
0779d36e600820d75d269d708b2bba10
-
SHA1
da1a7c7a96e445f51d05f4edd5fb52bf810ac224
-
SHA256
0a823a7a908effa848622f8573abedf9dca0afad27f841bc1e1815f2aba14bea
-
SHA512
7cafffde84d8e74dba6c88d71f3c2381353ef1c4714067d35601ee6c25663689cff1ab143f14a754cfa61396f5a2b6fc2a94bf399b6751626338ad04b715ec96
-
SSDEEP
1536:3lnZi4e1GVo2tQURMUGnryqV4L9LWFRKLTBB38igeafArUxblZCRwxgppo5Qkx:3ln831GVoLUR5Irg0i73drafA45YW5v
Malware Config
Signatures
Files
-
0a823a7a908effa848622f8573abedf9dca0afad27f841bc1e1815f2aba14bea.exe windows x86
18620e27f98ccad2d931f0827c9d9d8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
lstrcmpiA
ExitProcess
TerminateProcess
GetCommandLineA
GetProcAddress
lstrcmpA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
HeapAlloc
WriteFile
RtlUnwind
GetCPInfo
VirtualFree
HeapCreate
HeapFree
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
UnhandledExceptionFilter
SetHandleCount
FreeEnvironmentStringsW
GetCurrentProcess
FreeEnvironmentStringsA
GetModuleFileNameA
WideCharToMultiByte
user32
GetMessageA
TranslateMessage
GetClassNameA
GetCursorPos
WindowFromPoint
GetParent
GetWindowLongA
PostMessageA
SendMessageA
GetWindow
GetWindowRect
KillTimer
SetTimer
DefWindowProcA
LoadCursorA
PostQuitMessage
LoadIconA
ShowWindow
RegisterClassA
CreateWindowExA
DispatchMessageA
mxkeybd
MXK_Exit
MXK_Initialize
MXK_SetHookScanCode
winmm
mixerClose
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LD� Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE