Static task
static1
Behavioral task
behavioral1
Sample
afa540b63e5edf7506dc385dc0d8a47824aae7be7306da68250335bee3e39ebd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afa540b63e5edf7506dc385dc0d8a47824aae7be7306da68250335bee3e39ebd.exe
Resource
win10v2004-20220812-en
General
-
Target
afa540b63e5edf7506dc385dc0d8a47824aae7be7306da68250335bee3e39ebd
-
Size
302KB
-
MD5
b827febf00ac77c2d3286900374e4fc8
-
SHA1
be78660e22e28ed45a3df6cafe563663d7c2efe0
-
SHA256
afa540b63e5edf7506dc385dc0d8a47824aae7be7306da68250335bee3e39ebd
-
SHA512
f66533d01ab5784645aad9943ce3e464676888d01201e265dfadf3c9ca9c8a5320e7d39926641b4f9983b9f8e98f496a9a7e333e0a6e4c3cb9fc9208a87e674d
-
SSDEEP
6144:ScpjRa8zE8vAO90axZPVmK/CYn48KNj7ZOl35qeUlUnhAnN46:jpv5V90AjmK//FKBI3YFUh+
Malware Config
Signatures
Files
-
afa540b63e5edf7506dc385dc0d8a47824aae7be7306da68250335bee3e39ebd.exe windows x86
615e788fc462ee9acc44f10ec58cab6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
CreateSemaphoreA
GetTickCount
LoadLibraryA
VirtualProtect
GetPriorityClass
CreateDirectoryW
CreateMutexW
CreateHardLinkW
MapViewOfFile
Sleep
GetStartupInfoA
GetLocalTime
DeleteFileW
SetEvent
CreateFileA
GetFileAttributesA
GetProcessHeap
OpenSemaphoreA
ReadConsoleW
GetStdHandle
SetLastError
HeapSize
SetLastError
GetFileSize
userenv
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
CleanupCache
SsdpStartup
SsdpCleanup
FindServices
Sections
.text Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE