Static task
static1
Behavioral task
behavioral1
Sample
a475691f811d35ad06b31c02b9ce584955fd2dab297a5a3142286afd69000d95.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a475691f811d35ad06b31c02b9ce584955fd2dab297a5a3142286afd69000d95.exe
Resource
win10v2004-20221111-en
General
-
Target
a475691f811d35ad06b31c02b9ce584955fd2dab297a5a3142286afd69000d95
-
Size
2.1MB
-
MD5
563cc6eacadad5dcdc704c16c697777c
-
SHA1
fee3565d6eb13ffed4f999e4c30524c94b57ca48
-
SHA256
a475691f811d35ad06b31c02b9ce584955fd2dab297a5a3142286afd69000d95
-
SHA512
3252de18824bdf3b20f90f3e5a90ea218ce3e35c76a6f1c05721c9150706363c187ae3ead1a62723cedb93d56b24880ef61af718066f9b97f37bf335a8484188
-
SSDEEP
49152:dJCrZdKohoqCOi3OtQB1xFBlHCqHoyyfCy:derKzk2oQnxlyay
Malware Config
Signatures
Files
-
a475691f811d35ad06b31c02b9ce584955fd2dab297a5a3142286afd69000d95.exe windows x86
20568fc01f7a6a608452834f60ca9b01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
EnumTimeFormatsA
GetComputerNameA
SetEndOfFile
WriteProcessMemory
GetNamedPipeHandleStateA
GetLogicalDriveStringsA
GetCurrentDirectoryA
VirtualAlloc
GetCommModemStatus
GetSystemDefaultLangID
GlobalDeleteAtom
HeapCompact
UnregisterWait
GlobalFindAtomA
PeekConsoleInputA
LoadLibraryA
WriteConsoleInputA
Module32Next
UnlockFile
SetConsoleIcon
ReleaseMutex
AddAtomW
d3d9
Direct3DCreate9
advapi32
CredDeleteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 499KB - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ