Static task
static1
Behavioral task
behavioral1
Sample
02a101621bea6c326b5c09ca1447df39744859636931c60a191f6be01e23dd89.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
02a101621bea6c326b5c09ca1447df39744859636931c60a191f6be01e23dd89.exe
Resource
win10v2004-20220812-en
General
-
Target
02a101621bea6c326b5c09ca1447df39744859636931c60a191f6be01e23dd89
-
Size
260KB
-
MD5
0eabfd56c6278c2d07619633b6e71736
-
SHA1
3ed6aa072252fbace14a581358d555cb32a38675
-
SHA256
02a101621bea6c326b5c09ca1447df39744859636931c60a191f6be01e23dd89
-
SHA512
05ad2e610ee014457cede6163e7f0719908730d07e3efc33ddbe87f122582ae8b71fb233ea8f388b05d850f85b7c8dd93a2d97600699a29f5487feca96b5abe2
-
SSDEEP
6144:6Oy4FWfj1o7YVTch+6jionC3bts6h0uOI2IEQKwB9z:BUjU+8ioC3bts6kIgQfBV
Malware Config
Signatures
Files
-
02a101621bea6c326b5c09ca1447df39744859636931c60a191f6be01e23dd89.exe windows x86
7658353953fdbf82bcec028bdad4c07b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
Imports
kernel32
GetVersionExA
lstrcpyA
DeleteFileA
CreateFileA
FindResourceA
lstrlenA
LoadResource
WaitForSingleObject
WriteFile
SizeofResource
CreateProcessA
GetSystemDirectoryA
lstrcatA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
FindNextFileA
GetModuleHandleA
CreateMutexA
ReleaseMutex
CloseHandle
msvcr71
strstr
atoi
memset
strlen
user32
CharLowerA
wsprintfA
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
Sections
nsp0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE