Static task
static1
Behavioral task
behavioral1
Sample
a1f8a82e0677373d61a6c58d6bee8ef0b25db84247d198ed3524549232b5eaf8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a1f8a82e0677373d61a6c58d6bee8ef0b25db84247d198ed3524549232b5eaf8.exe
Resource
win10v2004-20220901-en
General
-
Target
a1f8a82e0677373d61a6c58d6bee8ef0b25db84247d198ed3524549232b5eaf8
-
Size
752KB
-
MD5
5f7d6b0f5fd2b565df1d43aa7a18e5fc
-
SHA1
78a2fb3facf93084fdf591bae3dfe71f7dfaa051
-
SHA256
a1f8a82e0677373d61a6c58d6bee8ef0b25db84247d198ed3524549232b5eaf8
-
SHA512
7d30791d65d7d805c5a1a9c7273a13b7fb5efdeca5e464d076b0581bf015312580db3babed22d1141bf39dae6c85656ce1081f5d7e9ae18204beba6b62b0330e
-
SSDEEP
12288:eOOSfBCbob+njgybsNtfEUioeJMFKxwucplOzrDbo328zzss2FuyPXY:FOQCboC0yRqlVss2UyPX
Malware Config
Signatures
Files
-
a1f8a82e0677373d61a6c58d6bee8ef0b25db84247d198ed3524549232b5eaf8.exe windows x86
f50937a0c40cdc36cf8da1bca9cb7561
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
GetStartupInfoW
ResetEvent
GetTickCount
ReleaseMutex
CreateFileA
ExitProcess
AddAtomA
GetTickCount
SetEndOfFile
GetCurrentDirectoryA
HeapSize
InitializeCriticalSection
GetFileSize
DeleteFileA
GetEnvironmentVariableA
SetLastError
WaitForSingleObject
GetModuleHandleA
FindClose
CloseHandle
HeapDestroy
HeapCreate
GetProfileIntW
SuspendThread
shell32
ExtractIconA
DuplicateIcon
StrChrA
SHFree
DllUnregisterServer
DragFinish
SHGetSettings
SHGetDiskFreeSpaceA
DragQueryFileA
SHGetMalloc
ShellAboutA
ShellMessageBoxA
DragAcceptFiles
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 746KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ