Static task
static1
Behavioral task
behavioral1
Sample
a0ca347f46956a9ca1393ebb90279312cf1d98f8a2a3365c1912526935f1ca56.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0ca347f46956a9ca1393ebb90279312cf1d98f8a2a3365c1912526935f1ca56.exe
Resource
win10v2004-20220812-en
General
-
Target
a0ca347f46956a9ca1393ebb90279312cf1d98f8a2a3365c1912526935f1ca56
-
Size
442KB
-
MD5
9e2ce5aa4d0dcf0d72ca7fb9a3d721b6
-
SHA1
39f21e201667376f568e06b4c5f480ab55f8514b
-
SHA256
a0ca347f46956a9ca1393ebb90279312cf1d98f8a2a3365c1912526935f1ca56
-
SHA512
ded62c6958c988234650edd1a3b9600137e047cd9fcf6f181006416f0b671ae3beb7ced39dd3a438fbe3ee572d90f413ac738775f3668f3c6a44e788c9a3dd12
-
SSDEEP
3072:pIewpkwhSeeLJsc+7GzhZAzZnQnBrQaWGc85SiVU+HNsUIlT3dTRl0ra:mb9eL67eZKnkBsaWSjNHZoT3ka
Malware Config
Signatures
Files
-
a0ca347f46956a9ca1393ebb90279312cf1d98f8a2a3365c1912526935f1ca56.exe windows x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE