Static task
static1
Behavioral task
behavioral1
Sample
a64f9a605f64eee726cf8b27ee4093526bcfbc25867700d6ce3642a267fd323b.exe
Resource
win7-20221111-en
General
-
Target
a64f9a605f64eee726cf8b27ee4093526bcfbc25867700d6ce3642a267fd323b
-
Size
112KB
-
MD5
2d40fbeb9a56d0d1e6ad0579ce074d5d
-
SHA1
27ef84e1f3e50fa79918482c657e1526cc921511
-
SHA256
a64f9a605f64eee726cf8b27ee4093526bcfbc25867700d6ce3642a267fd323b
-
SHA512
b67a779d9266fa11ccd48efd4a614532ab17c5916df6338d146ec5ceb9021988045f0c19c426dbf074b832ea7ebd875a95e5ee6ca84aa7f503503a00a3942cb9
-
SSDEEP
1536:iWiN6JOJr3gZzW7e9+Fh3pcdMab/pCht2weHbMtmHLt1IF9ExcjawKiH7U3n5fGI:xJOJTg47QK3pcDb/pWiokRm9dj5AkMd
Malware Config
Signatures
Files
-
a64f9a605f64eee726cf8b27ee4093526bcfbc25867700d6ce3642a267fd323b.exe windows x86
6bc9133cac93e0790b40d0a459bd5989
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateWaitableTimerW
GetStdHandle
GetDriveTypeA
IsValidCodePage
GetModuleHandleA
GetBinaryTypeA
FileTimeToLocalFileTime
lstrcmpiA
lstrcmpiA
EndUpdateResourceA
Sleep
lstrcmpiA
GetExitCodeProcess
lstrcmpiA
GetTickCount
TlsFree
GetPrivateProfileStringA
GetLogicalDrives
lstrcmpiA
CreateNamedPipeA
lstrcatW
SetLastError
HeapCreate
ntmarta
AccFreeIndexArray
EventNameFree
EventGuidToName
AccConvertAccessToSD
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ