Static task
static1
Behavioral task
behavioral1
Sample
a815c58fa8a851c6719268617e4411255ad804e3485bb3a3967ef0e46e206370.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a815c58fa8a851c6719268617e4411255ad804e3485bb3a3967ef0e46e206370.exe
Resource
win10v2004-20221111-en
General
-
Target
a815c58fa8a851c6719268617e4411255ad804e3485bb3a3967ef0e46e206370
-
Size
210KB
-
MD5
7b88b2160619d2a00032eb7dc9763f40
-
SHA1
38eb9f7455a677b276103a472fa0c359ebfdf2df
-
SHA256
a815c58fa8a851c6719268617e4411255ad804e3485bb3a3967ef0e46e206370
-
SHA512
92d2c51e4021cde405643268253030c13fe7728ff0d3196742144bdf848b86dad0ae6e4caeda1c17d5626f113e032a9aff37320f7ea6c2fba9172a343b2baf3e
-
SSDEEP
3072:OLSyu70yczCqD17qNc+lK5kRq/kt5K0pBmXB7NPITO6peEfe9M1Cy:OOUy0CqD1sxJqV0PofPITrece9S
Malware Config
Signatures
Files
-
a815c58fa8a851c6719268617e4411255ad804e3485bb3a3967ef0e46e206370.exe windows x86
c4b320e68742b23a0f41e6d4e9388569
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryExA
IsBadCodePtr
GetStdHandle
GlobalUnlock
RaiseException
HeapCreate
WriteProfileStringA
GlobalAddAtomA
GetOEMCP
FreeConsole
GlobalFree
lstrcat
CloseHandle
LocalFree
EnterCriticalSection
GetLastError
LoadResource
DeleteAtom
SetConsolePalette
GlobalAddAtomA
user32
GetForegroundWindow
GetClassInfoExA
ValidateRect
GetFocus
BeginPaint
AlignRects
DrawEdge
GetClassNameA
IsIconic
GetWindowTextLengthA
GetWindowTextA
GetParent
GetActiveWindow
ShowWindow
GetDC
CloseWindow
GetWindow
ReleaseDC
EndPaint
mprapi
MprAdminUserGetInfo
MprAdminUserOpen
MprAdminUserRead
MprAdminUserClose
MprAdminUserWrite
linkinfo
CreateLinkInfoA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ