Static task
static1
Behavioral task
behavioral1
Sample
a347d455b8747dac486ad1aca5243f0935d6273af8261cf88bac66aaa0178343.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a347d455b8747dac486ad1aca5243f0935d6273af8261cf88bac66aaa0178343.exe
Resource
win10v2004-20220812-en
General
-
Target
a347d455b8747dac486ad1aca5243f0935d6273af8261cf88bac66aaa0178343
-
Size
56KB
-
MD5
06fa015059263017f9190a5f0519b0c0
-
SHA1
a7c9bad2f5f406d13d0718511be8c9d62eb57545
-
SHA256
a347d455b8747dac486ad1aca5243f0935d6273af8261cf88bac66aaa0178343
-
SHA512
16839d1280a100555957cb988ecf2d62fca740d82fe7aa88357f086682c31ed756d7fbd28803cc64dd5aee527675104d1f361acef4f70517b6126a24044a4946
-
SSDEEP
384:hqBPQOYd+XHAdFVzbyWAxb31jTEnWXrQigKCVmGCRIw9eUCqXALQLuJJI6:hmjWWWAlljAnW7QfHCewAUCqXEUC7
Malware Config
Signatures
Files
-
a347d455b8747dac486ad1aca5243f0935d6273af8261cf88bac66aaa0178343.exe windows x86
09bae69d1940b42ab81717f4d1b4710c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
sprintf
strncpy
__CxxFrameHandler
strstr
strrchr
_strlwr
kernel32
lstrcmpA
lstrcpyA
lstrcatA
GetStartupInfoA
GetModuleHandleA
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetCurrentProcess
CreateToolhelp32Snapshot
IsBadReadPtr
lstrlenW
WideCharToMultiByte
CreateProcessA
LoadLibraryA
GetProcAddress
CreateDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
CreateFileMappingA
Sleep
GetLastError
MapViewOfFile
CloseHandle
GetModuleFileNameA
CreateThread
SetFileAttributesA
lstrlenA
CreateMutexA
ole32
CoCreateInstance
CoInitialize
oleaut32
SysStringLen
SysFreeString
VariantClear
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE