Static task
static1
Behavioral task
behavioral1
Sample
a10455366d82e81b4a7b13fe35cd24091ca4ca5a9531d8fec01ec5240b49e966.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a10455366d82e81b4a7b13fe35cd24091ca4ca5a9531d8fec01ec5240b49e966.exe
Resource
win10v2004-20221111-en
General
-
Target
a10455366d82e81b4a7b13fe35cd24091ca4ca5a9531d8fec01ec5240b49e966
-
Size
122KB
-
MD5
56d26649a3c4d63e5c0436df44952ae8
-
SHA1
8216512e50d35013c16c6112ee8ffcfb10909d8e
-
SHA256
a10455366d82e81b4a7b13fe35cd24091ca4ca5a9531d8fec01ec5240b49e966
-
SHA512
57947a42f90cab0f215a69171b301f657016905504b06d255b5262514901117c1389363d6347f73edd6aac0009be631c9a6bf766e11eb86441d6a7de9f4944af
-
SSDEEP
3072:MbpFc2dV45YK+wecEoMoQJrXYuRo6PtL29pmxxYM3:SgJ5v+wREoJQuatL2e
Malware Config
Signatures
Files
-
a10455366d82e81b4a7b13fe35cd24091ca4ca5a9531d8fec01ec5240b49e966.exe windows x86
fc9f0e9aa1bf482abccbd0c21b293c12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ClearCommError
CopyFileA
CopyFileExA
CreateFileMappingA
CreateRemoteThread
ExitProcess
FindAtomA
FlushFileBuffers
GetAtomNameA
GetCPInfo
GetCommMask
GetCommandLineA
GetConsoleCP
GetConsoleCursorInfo
GetCurrentProcess
GetFileTime
GetModuleHandleA
GetNamedPipeInfo
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GlobalLock
HeapCreate
HeapDestroy
InitAtomTable
IsBadReadPtr
LocalAlloc
LocalReAlloc
MapViewOfFileEx
MoveFileExA
MulDiv
ReadConsoleA
ReadProcessMemory
SetUnhandledExceptionFilter
VirtualAllocEx
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
WriteProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
free
malloc
memset
signal
strcpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE