Static task
static1
Behavioral task
behavioral1
Sample
a07202f828a6242b62d9dba78eebde221c2986e225b6a218475697778f3c3765.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a07202f828a6242b62d9dba78eebde221c2986e225b6a218475697778f3c3765.exe
Resource
win10v2004-20221111-en
General
-
Target
a07202f828a6242b62d9dba78eebde221c2986e225b6a218475697778f3c3765
-
Size
23.2MB
-
MD5
acd10527b4da0905247d4a194d52e13d
-
SHA1
615ceb10f3a07d3b82f8a5be7e61b4cb6971de56
-
SHA256
a07202f828a6242b62d9dba78eebde221c2986e225b6a218475697778f3c3765
-
SHA512
2daca07f6bed257fbb185154ebce784daed3d45e4d9a27c2d038d4e531ee1646b3d1eb4b57ebe17c08f024e0d7cb0c54da8146407ca3fe6cb1872aff9612c5c1
-
SSDEEP
393216:FEVRS5q/Dbj7+tfs1xd4lwcrrZSpVgLOSrOqdDD/AuYz+aKKR9cGXmszx:eV5Whs1xuicr1SpVcOSrOQDDgzFKy
Malware Config
Signatures
Files
-
a07202f828a6242b62d9dba78eebde221c2986e225b6a218475697778f3c3765.exe windows x86
3dc64b2734d69c66d1f52ce23537da98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetProcessWorkingSetSize
SetProcessWorkingSetSize
lstrlenW
EnumDateFormatsW
LocalFree
OpenProcess
GetCurrentProcess
GetModuleHandleA
SetUnhandledExceptionFilter
user32
GetClassInfoExW
MessageBoxA
CreateWindowExA
RegisterClassW
GetClassNameW
advapi32
EqualDomainSid
psapi
GetProcessMemoryInfo
Sections
t Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
N Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
t Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hry Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
Ysr Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ