Static task
static1
Behavioral task
behavioral1
Sample
a2913c85e6fc78717e8158e60f31fed4435c21f2c73e8c498b5844de0f662f35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2913c85e6fc78717e8158e60f31fed4435c21f2c73e8c498b5844de0f662f35.exe
Resource
win10v2004-20221111-en
General
-
Target
a2913c85e6fc78717e8158e60f31fed4435c21f2c73e8c498b5844de0f662f35
-
Size
111KB
-
MD5
c6d9f240c3474e4d5a0353f60806ef05
-
SHA1
c9fea208d9dffc10c9aa08b32328312d6be9bc64
-
SHA256
a2913c85e6fc78717e8158e60f31fed4435c21f2c73e8c498b5844de0f662f35
-
SHA512
216e816b5fa7d6a1123b0676c96c03f0e855d1321ab6e7a49003413a54f302c3ba2f59bed122e03b3a080591c25dea2ce658ed3d657299799e88fb7360356b08
-
SSDEEP
1536:oSMGNxfUdc0BsfhVWxGVNKI1Bhrrrrrrrrrrx3gsmaVH1Bji8XDIQQDLejadfCPv:+GNRm7s5fj1Bf3vH1U8zIQzjadfCu2
Malware Config
Signatures
Files
-
a2913c85e6fc78717e8158e60f31fed4435c21f2c73e8c498b5844de0f662f35.exe windows x86
2ef5944541e87488e8c4437d51361aa8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
TlsGetValue
GlobalUnlock
GetACP
CreateFileA
LoadLibraryW
FindResourceA
GetModuleHandleA
LocalFree
TerminateThread
CreateMutexA
GetEnvironmentVariableA
FindClose
HeapCreate
lstrlen
IsBadStringPtrW
PulseEvent
Sleep
SetLastError
CloseHandle
user32
GetDlgItem
SetFocus
CopyRect
DefWindowProcW
CheckRadioButton
IsWindow
CallWindowProcA
FillRect
DrawEdge
DispatchMessageA
GetIconInfo
DrawMenuBar
GetDC
msasn1
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncEoid
dpnet
DirectPlay8Create
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bslraxh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE