Static task
static1
Behavioral task
behavioral1
Sample
a002479568c68eb63bf28da1e9deb2a7907024162e46cf0c2475efe3069c6c95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a002479568c68eb63bf28da1e9deb2a7907024162e46cf0c2475efe3069c6c95.exe
Resource
win10v2004-20221111-en
General
-
Target
a002479568c68eb63bf28da1e9deb2a7907024162e46cf0c2475efe3069c6c95
-
Size
3.6MB
-
MD5
93950c53af38feac5a7213e6c70b9970
-
SHA1
310cfb5107ca9cb535969f0693a955b1f6d592f7
-
SHA256
a002479568c68eb63bf28da1e9deb2a7907024162e46cf0c2475efe3069c6c95
-
SHA512
a8fec32c66b90e071a84c4caf094a46d9665a0ecc09fd5e4a6182aafba8c4358bc99be2abf7c62cb89eda93b4a68bbf0d5c565854b70a7f2897b10125af517f3
-
SSDEEP
49152:DoNIhM96r4cAY/WrZYXPDYxn8IjOasdqe/Qt49x6EzNAQrh3t+lh0njY2Xl:cChMcrc+/Gn9he/84rVhQ7ajYA
Malware Config
Signatures
Files
-
a002479568c68eb63bf28da1e9deb2a7907024162e46cf0c2475efe3069c6c95.exe windows x86
5304e0f9b7d8bdb709b47cfa9834050d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCommandHistoryLengthW
ProcessIdToSessionId
GetCurrentThread
GetFileSizeEx
OpenThread
SetConsoleNumberOfCommandsA
OpenEventA
GetWindowsDirectoryA
GetCurrentProcessId
OpenMutexA
CancelWaitableTimer
VirtualFreeEx
VirtualAllocEx
GetSystemWindowsDirectoryA
GetConsoleWindow
CreateMutexA
CreateEventA
IsDebuggerPresent
VerSetConditionMask
PeekConsoleInputA
GetProcessPriorityBoost
IsProcessorFeaturePresent
dpnet
DirectPlay8Create
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 391KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 507KB - Virtual size: 845KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 366KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ