Static task
static1
Behavioral task
behavioral1
Sample
a014173d48c956df628ecbacf1078cb14b158db153af3f53ea4a5b62690e6e67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a014173d48c956df628ecbacf1078cb14b158db153af3f53ea4a5b62690e6e67.exe
Resource
win10v2004-20220812-en
General
-
Target
a014173d48c956df628ecbacf1078cb14b158db153af3f53ea4a5b62690e6e67
-
Size
172KB
-
MD5
0dbb3f7af2919712c9b0420a94b80040
-
SHA1
8aa4d4a0b8d3feb860da44b6ab421c4207410606
-
SHA256
a014173d48c956df628ecbacf1078cb14b158db153af3f53ea4a5b62690e6e67
-
SHA512
3c90f37cd296ab68a5e92d3fb8e77b97d53228e823e94cce3a978421674c100515fe5550c0bfdd6b628b63aabb10ee97b8a507c38b2e09f334f39b12d2bef99c
-
SSDEEP
1536:eQ4JTG2rlgilJfcT5hEDdHzvKMPHu9F6PSpBwisKldR:eQ4Tl6ipQhaHDKMPHu94PkBVV
Malware Config
Signatures
Files
-
a014173d48c956df628ecbacf1078cb14b158db153af3f53ea4a5b62690e6e67.exe windows x86
6fc7d662a4b407051985ae21be18148c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
lstrcpyA
FindClose
ReadFile
GlobalAlloc
CreateFileA
SetFilePointer
CloseHandle
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetLastError
DeleteFileA
WriteFile
GetLocalTime
GetTimeZoneInformation
msvcrt
_mbsrchr
_mbschr
oleaut32
SysAllocString
SysAllocStringByteLen
user32
wsprintfA
MessageBoxA
ole32
OleInitialize
CLSIDFromProgID
CoCreateInstance
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 365B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE