Static task
static1
Behavioral task
behavioral1
Sample
a8ee284ba8a3d2a9968e7f1aa6a028cdd2f359e2ca14e83c9bd08f3fedaeb549.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8ee284ba8a3d2a9968e7f1aa6a028cdd2f359e2ca14e83c9bd08f3fedaeb549.exe
Resource
win10v2004-20220812-en
General
-
Target
a8ee284ba8a3d2a9968e7f1aa6a028cdd2f359e2ca14e83c9bd08f3fedaeb549
-
Size
749KB
-
MD5
af6741d75dde6756d08bc72c3c6fb360
-
SHA1
57e2384f638289badf807625d251a678bd4ca3d8
-
SHA256
a8ee284ba8a3d2a9968e7f1aa6a028cdd2f359e2ca14e83c9bd08f3fedaeb549
-
SHA512
381aa7039da5e05c3ef5312064cd609ee0820248d37438b2e45f117df6eae5eafad6e9bee5deb7eb0b9b9d7daeed860b19863a79f29b97bf6a0b31e1ee66efd1
-
SSDEEP
12288:02mvNPFqJu06nEOoife+NhgBAzn5hOQiikCxu80Kfp58Az9xzmAnuxYGFk:B7Jd61vkAVAQiikCxu1KfpysUU
Malware Config
Signatures
Files
-
a8ee284ba8a3d2a9968e7f1aa6a028cdd2f359e2ca14e83c9bd08f3fedaeb549.exe windows x86
db7bca358f9af261ae4129a988b525f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersion
CreateEventA
RemoveDirectoryA
GetModuleHandleA
ExitThread
SetVolumeLabelW
IsBadCodePtr
SetEvent
lstrlenA
FindClose
CreateMailslotA
VirtualProtectEx
FindClose
GetFileType
GetSystemTime
HeapFree
CreateDirectoryA
ReleaseMutex
SetStdHandle
ResetEvent
FindAtomA
RemoveDirectoryA
WriteFile
WriteConsoleW
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ