Static task
static1
Behavioral task
behavioral1
Sample
a6e1f554bc2a50ea39a2de86588c3d04040ae7e27302fcd83b7326cdebee79b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6e1f554bc2a50ea39a2de86588c3d04040ae7e27302fcd83b7326cdebee79b6.exe
Resource
win10v2004-20221111-en
General
-
Target
a6e1f554bc2a50ea39a2de86588c3d04040ae7e27302fcd83b7326cdebee79b6
-
Size
413KB
-
MD5
45f6d333d4f7d0c2f2196bc5165a412e
-
SHA1
38a968264ca6cfc21d94f5c70a826e4d68363ff3
-
SHA256
a6e1f554bc2a50ea39a2de86588c3d04040ae7e27302fcd83b7326cdebee79b6
-
SHA512
a6bfd805af170421bf96f06d1b0e1cbaa43fc76a2c8077a8b893dbf68a4503dd8973a7f293be1db9b5b75ee4eb04f0226e3ee947f9e71ebfedf11f8669c6bd38
-
SSDEEP
6144:FAVGVTY1+W+0el89xFXLurPfFrlJqi9WlOCcZ5qhbklIvVGj+J:FG+W+N89hlK+J
Malware Config
Signatures
Files
-
a6e1f554bc2a50ea39a2de86588c3d04040ae7e27302fcd83b7326cdebee79b6.exe windows x86
bc919411231afc72dec6893db6f55ace
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
kernel32
DeleteFileA
LCMapStringA
LoadLibraryA
lstrcpyn
RtlMoveMemory
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetCommandLineA
GetProcAddress
WritePrivateProfileStringA
FreeLibrary
msvcrt
strncmp
strncpy
??3@YAXPAX@Z
sprintf
atoi
_ftol
strchr
memmove
modf
free
malloc
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE