Static task
static1
Behavioral task
behavioral1
Sample
a6897f96ad9786f34084442f0ae5b9665f40b3016b663916db3409add895f892.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6897f96ad9786f34084442f0ae5b9665f40b3016b663916db3409add895f892.exe
Resource
win10v2004-20220812-en
General
-
Target
a6897f96ad9786f34084442f0ae5b9665f40b3016b663916db3409add895f892
-
Size
498KB
-
MD5
d7657f0bb3d57442d140bfa090dff10f
-
SHA1
d1a1e626f0b227e33476e636c37a2f7598304713
-
SHA256
a6897f96ad9786f34084442f0ae5b9665f40b3016b663916db3409add895f892
-
SHA512
5ea3f6fb39bb20f8a3630b8d8664a048008e44900e37d3e617e9d2afa0c0fdc30456e45819b7456781bc9f7ba6e86aafbc28a8f2bbf91f732c075739f80b5807
-
SSDEEP
6144:I61kPvy/KD5bVg05M/PZ+B+bHRJpEvlTZlG5KyLcRMCts+Yl8Zjkfj:AiCDVk/PI89J2tTANj+Yljb
Malware Config
Signatures
Files
-
a6897f96ad9786f34084442f0ae5b9665f40b3016b663916db3409add895f892.exe windows x86
f3a79755e7a8a02404b16e12603280b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetFileAttributesA
IsDebuggerPresent
TlsAlloc
Sleep
GetStartupInfoA
DeviceIoControl
GetDriveTypeA
lstrlenA
HeapCreate
DeleteFileA
GetModuleHandleA
ReleaseMutex
GetCommandLineA
CreateFileMappingA
PulseEvent
GetModuleFileNameW
IsBadStringPtrW
TlsGetValue
CreateFileA
user32
LoadImageA
DrawTextW
CallWindowProcW
PeekMessageA
GetIconInfo
DestroyWindow
DispatchMessageA
IsZoomed
FindWindowW
DestroyMenu
DispatchMessageA
GetWindowLongA
IsWindow
cliconfg
OnInitDialogMain
OnInitDialogMain
OnInitDialogMain
OnInitDialogMain
cryptui
CryptUIDlgCertMgr
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ