Static task
static1
Behavioral task
behavioral1
Sample
a1b58dc719c64d457855cd9d86de96a03c5120ff7e94fa75ce714a7adc6418b2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a1b58dc719c64d457855cd9d86de96a03c5120ff7e94fa75ce714a7adc6418b2.exe
Resource
win10v2004-20221111-en
General
-
Target
a1b58dc719c64d457855cd9d86de96a03c5120ff7e94fa75ce714a7adc6418b2
-
Size
119KB
-
MD5
75dca07221f9216f313fbc30f1ea30de
-
SHA1
627adcad8761c4df3d3f49ab65def56b2be856b4
-
SHA256
a1b58dc719c64d457855cd9d86de96a03c5120ff7e94fa75ce714a7adc6418b2
-
SHA512
574ac7f8c2344ffe7442674b6eeb1589f9a2144436dc448ebe74559442fa24ec41daa5bc29d31282c7d695a898ddc01b03d5c7f97a2b2a5af5e9ed6743505baa
-
SSDEEP
3072:gFkjEt59Z/Eih+UC7KnxFEXEGgT7fFRXIu2:dIPcg+/7wFCvq79RIu2
Malware Config
Signatures
Files
-
a1b58dc719c64d457855cd9d86de96a03c5120ff7e94fa75ce714a7adc6418b2.exe windows x86
0a8186e0e6e2654f3a20c6d68a045d04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ConnectNamedPipe
CopyFileExA
DeleteAtom
DosDateTimeToFileTime
ExitProcess
FindAtomA
FindClose
FindNextChangeNotification
FindResourceA
FindResourceExA
FormatMessageA
FreeConsole
FreeLibrary
GetAtomNameA
GetCommMask
GetCommTimeouts
GetCommandLineA
GetConsoleOutputCP
GetDiskFreeSpaceExA
GetDriveTypeA
GetHandleInformation
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProfileSectionA
GetStartupInfoA
GetTempPathA
GetVolumeInformationA
GlobalReAlloc
GlobalUnWire
HeapFree
IsBadHugeReadPtr
LocalLock
PulseEvent
ReadConsoleA
SetFilePointer
SetUnhandledExceptionFilter
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
ftell
fwrite
malloc
memset
rewind
signal
strncpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE