Static task
static1
Behavioral task
behavioral1
Sample
a484d6967a43d850c8b1d24d61ffb45b06e26b22c5a18947b7f7d4c7f8c25e66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a484d6967a43d850c8b1d24d61ffb45b06e26b22c5a18947b7f7d4c7f8c25e66.exe
Resource
win10v2004-20220812-en
General
-
Target
a484d6967a43d850c8b1d24d61ffb45b06e26b22c5a18947b7f7d4c7f8c25e66
-
Size
34KB
-
MD5
b62d2de9d558d40feacd2feba4c77977
-
SHA1
28a6cf21c88771da5ba258b9c9573bba0de9afe7
-
SHA256
a484d6967a43d850c8b1d24d61ffb45b06e26b22c5a18947b7f7d4c7f8c25e66
-
SHA512
6d4001e6c2288c6ee22b8ff8ab5c9c4d766c07b80de4fa6a835b0f5daf659ba8783daf0384b51e85a86c920dc4ff00c31b6a6c59732d4f300c11b6b1a0c946c5
-
SSDEEP
384:Pda32nrqUy5oea78wobTpAJHSZbLFis1:lamnrUoeqdyZbLFi6
Malware Config
Signatures
Files
-
a484d6967a43d850c8b1d24d61ffb45b06e26b22c5a18947b7f7d4c7f8c25e66.exe windows x86
8aeeef0277d3385c7bda8bf87a79509d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDiskFreeSpaceA
GetACP
GetCurrentThread
GetDriveTypeA
GetEnvironmentStringsA
GetPrivateProfileSectionA
IsValidCodePage
GetProcAddress
SearchPathA
_lopen
GetDateFormatW
Beep
ExitThread
GetSystemDirectoryA
lz32
LZRead
LZInit
midimap
modMessage
modMessage
modMessage
mpr
WNetAddConnection2A
msi
MsiDoActionA
MsiDoActionW
MsiEnableLogA
MsiEnableLogW
MsiEnableUIPreview
MsiEnumClientsA
MsiEnumClientsW
MsiEnumComponentCostsA
MsiEnumComponentsA
MsiEnumComponentsW
MsiEnumFeaturesA
MsiEnumFeaturesW
MsiEnumPatchesA
MsiEnumPatchesExA
MsiEnumPatchesExW
MsiEnumPatchesW
MsiEnumProductsA
MsiEnumProductsExA
MsiEnumProductsExW
MsiEnumProductsW
MsiFormatRecordA
MsiFormatRecordW
MsiGetActiveDatabase
MsiGetComponentPathA
MsiGetComponentPathW
MsiGetComponentStateA
MsiGetComponentStateW
MsiGetDatabaseState
MsiGetFeatureCostA
MsiGetFeatureCostW
MsiGetFeatureInfoA
Sections
Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data1 Size: 7KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbb Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.css Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dss Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE