Static task
static1
Behavioral task
behavioral1
Sample
a1839d5fb5061be2945272333cd1e2edb25b09c393a528ac541a48c4eca14181.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1839d5fb5061be2945272333cd1e2edb25b09c393a528ac541a48c4eca14181.exe
Resource
win10v2004-20220812-en
General
-
Target
a1839d5fb5061be2945272333cd1e2edb25b09c393a528ac541a48c4eca14181
-
Size
811KB
-
MD5
049f717aa49436d506642b95d70befc7
-
SHA1
98cfb138a965fe124d44c29a192ca08c5ba9468b
-
SHA256
a1839d5fb5061be2945272333cd1e2edb25b09c393a528ac541a48c4eca14181
-
SHA512
64c160790ef217919c5885bf3f9ddfd121a1fd32f72aed73d56dedcb594eb6b658785f07882d698ce2f2f0ce91d242db588d5298136f4acba29eaf9f26da8a31
-
SSDEEP
12288:HEI7yPkaTfwDqxda3DPVGOTW905imx5iD2DU0hxuYCjzeOkStOdkleth+F87CMKc:XIjToewbVyq5i45Fw0rulbtAqzmCMKc
Malware Config
Signatures
Files
-
a1839d5fb5061be2945272333cd1e2edb25b09c393a528ac541a48c4eca14181.exe windows x86
d3ba7d3b4f74b69ba9a06867e92f6ae1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GlobalFree
OpenSemaphoreA
DeleteFileA
GetFileAttributesW
CreateFileA
CreateDirectoryW
GetModuleFileNameA
ReadConsoleA
VirtualProtect
GetTickCount
lstrlenA
GetProcessHeap
SetLocalTime
Sleep
LoadLibraryA
WriteConsoleA
CreateSemaphoreW
HeapSize
CloseHandle
SetLastError
GetStartupInfoA
GetEnvironmentStringsA
GetFileSize
SetEvent
user32
IsZoomed
FindWindowA
PeekMessageA
GetClassInfoA
GetWindowLongA
DestroyMenu
SetFocus
DrawTextW
IsWindow
CallWindowProcW
DispatchMessageA
GetSysColor
DispatchMessageA
xmlprovi
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
advapi32
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE