Static task
static1
Behavioral task
behavioral1
Sample
a1a2a44dd328722bc5288cfcbbbe9c16cffd6806e5bf9310fecd5e6e666e10f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1a2a44dd328722bc5288cfcbbbe9c16cffd6806e5bf9310fecd5e6e666e10f7.exe
Resource
win10v2004-20220901-en
General
-
Target
a1a2a44dd328722bc5288cfcbbbe9c16cffd6806e5bf9310fecd5e6e666e10f7
-
Size
799KB
-
MD5
0f9885b99b86ba7b56e9205f62554ff6
-
SHA1
b35db5d0cab5b34e47f22082c9429154e5337f66
-
SHA256
a1a2a44dd328722bc5288cfcbbbe9c16cffd6806e5bf9310fecd5e6e666e10f7
-
SHA512
3b992244c085c48aa65a1f2fbc5088b5255f04f48799f3495369f1b7310e79362083b8b10f22dbac65965aa560059667af9014dc10f247d55c5b7e48102c533b
-
SSDEEP
24576:3n/YLSw3jC7LgOxhQIjjtec5UQtvUD/u:3/KSw3jC7bbjUGtvd
Malware Config
Signatures
Files
-
a1a2a44dd328722bc5288cfcbbbe9c16cffd6806e5bf9310fecd5e6e666e10f7.exe windows x86
817088f6597ea83f2cadee8ec5c99246
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
IsValidCodePage
GetModuleHandleA
FindClose
GetStringTypeA
LocalLock
GetExitCodeThread
SuspendThread
TlsGetValue
FindResourceW
HeapFree
GetCurrentProcess
SetPriorityClass
VirtualProtect
SetLastError
GetLocaleInfoW
GetFileAttributesA
MapViewOfFile
GetTickCount
RemoveDirectoryW
CreateDirectoryW
advapi32
InitializeSid
IsTextUnicode
RegDeleteValueA
RegCreateKeyExW
ClearEventLogW
CreateProcessAsUserA
IsValidSecurityDescriptor
IsValidAcl
RegEnumKeyA
RegQueryValueW
CreateServiceW
ControlService
IsValidSid
msctf
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 695KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE