Static task
static1
Behavioral task
behavioral1
Sample
a2a53708eea213154e4242da7fcb16862e1f2993c0f3ad47a833733466115eb1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2a53708eea213154e4242da7fcb16862e1f2993c0f3ad47a833733466115eb1.exe
Resource
win10v2004-20221111-en
General
-
Target
a2a53708eea213154e4242da7fcb16862e1f2993c0f3ad47a833733466115eb1
-
Size
12.2MB
-
MD5
bb955d0d9ebd0de615a7a22094127118
-
SHA1
185e1cb3eb091e84478eae9f3afb80af1a1e8524
-
SHA256
a2a53708eea213154e4242da7fcb16862e1f2993c0f3ad47a833733466115eb1
-
SHA512
5daaee32964b2f0e071add8f1aeaefea7f94a29b25e3ccd0006f5870297659be0da8409d5f2300f1a9b8a1749455a727da0b165357453a917fca53a3233e8996
-
SSDEEP
393216:0p6+wOpmD/jhGEgZXWPH/EdB6ntUbygAAfq:0HpmDLhGEgZXSH/EDSey0fq
Malware Config
Signatures
Files
-
a2a53708eea213154e4242da7fcb16862e1f2993c0f3ad47a833733466115eb1.exe windows x86
0622dac7aa3cb50ba04910e62f0a7dba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
FindResourceExA
VirtualUnlock
GlobalReAlloc
UnlockFileEx
GetDefaultCommConfigA
GetFileAttributesExA
GlobalAddAtomW
SetLocalPrimaryComputerNameA
GlobalDeleteAtom
OpenMutexA
FreeResource
SetFileAttributesA
GetNumberOfConsoleInputEvents
VirtualAlloc
SetProcessShutdownParameters
FindNextVolumeA
FindFirstChangeNotificationA
GetProcessPriorityBoost
AddAtomW
GetSystemDefaultUILanguage
GetWindowsDirectoryA
d3d9
Direct3DCreate9
advapi32
CredDeleteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 499KB - Virtual size: 838KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 379KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ