Static task
static1
Behavioral task
behavioral1
Sample
a7a06ce48fc26dfc683e7fb854c7c5b23ace21f309e0128bdef11b81d02e844f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7a06ce48fc26dfc683e7fb854c7c5b23ace21f309e0128bdef11b81d02e844f.exe
Resource
win10v2004-20220812-en
General
-
Target
a7a06ce48fc26dfc683e7fb854c7c5b23ace21f309e0128bdef11b81d02e844f
-
Size
64KB
-
MD5
f5c296573af50b1254d43471ef217625
-
SHA1
17338c27671d5c3d0ba3eab34c85a2b468b0c311
-
SHA256
a7a06ce48fc26dfc683e7fb854c7c5b23ace21f309e0128bdef11b81d02e844f
-
SHA512
0a5ad73c6bc08479ec5a3ce391129bd92f1f5dd1290f51e6bc9bc5dc840834197ec263df232e83612154ba7ce225cbc83983e422cd8f7ea3476cb89d99276a37
-
SSDEEP
1536:OWgs3dEPtlffaNDa90bu0w7EhTsD6UHGE6g/2:O5EEllXalaMu04EK6M2
Malware Config
Signatures
Files
-
a7a06ce48fc26dfc683e7fb854c7c5b23ace21f309e0128bdef11b81d02e844f.exe windows x86
498e23bc044f8684d55fb822a1f2dd08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
HeapCreate
GetModuleHandleW
GetEnvironmentVariableW
GetCurrentDirectoryA
ReadConsoleA
VirtualFree
GetVolumePathNameW
GetConsoleMode
GetDiskFreeSpaceW
Sleep
GetModuleHandleA
CloseHandle
ReleaseSemaphore
FindNextVolumeA
CloseHandle
GetStringTypeA
GetFullPathNameW
GetFullPathNameW
CloseHandle
OpenMutexW
WaitForMultipleObjects
FindFirstVolumeA
dbghelp
ImageRvaToVa
ImageRvaToSection
FindFileInPath
ImageNtHeader
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE