Static task
static1
Behavioral task
behavioral1
Sample
a001a39e001cc8bd7d7815c260e86bd93cc9bbd6d85d91412ad8883bdebc9a5a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a001a39e001cc8bd7d7815c260e86bd93cc9bbd6d85d91412ad8883bdebc9a5a.exe
Resource
win10v2004-20221111-en
General
-
Target
a001a39e001cc8bd7d7815c260e86bd93cc9bbd6d85d91412ad8883bdebc9a5a
-
Size
199KB
-
MD5
3ea9adbade0cca44d45f01be63a20b8b
-
SHA1
c816b084cd57d149ad4a6651f07f083a2bd44b28
-
SHA256
a001a39e001cc8bd7d7815c260e86bd93cc9bbd6d85d91412ad8883bdebc9a5a
-
SHA512
8b2255c3aaad4093a5b8759dd090a762507816dbfc48c5cf518a98d275e663fa5651a6e96e0cd0a755fed35222c530daea551f3df324ac614c8340fa6b84dfb0
-
SSDEEP
3072:Cn6/HBq3qAdGhS4k5p5pU4T4B+jca8Wz/9DMFIW925pOLA/hmqVvTVLC4HTkweo8:C+Bq3qnop535+Wzmw5pSqpheLwep
Malware Config
Signatures
Files
-
a001a39e001cc8bd7d7815c260e86bd93cc9bbd6d85d91412ad8883bdebc9a5a.exe windows x86
3f477330186995b2fc370b296b26ded6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
GetModuleFileNameA
SetEndOfFile
CloseHandle
CreateDirectoryA
WriteFile
GetDriveTypeW
GetCommandLineA
RemoveDirectoryA
AddAtomA
SetVolumeLabelA
GetModuleHandleA
WaitForMultipleObjects
ClearCommBreak
GetProcessHeap
CreateSemaphoreW
ExitThread
GetFileType
HeapFree
IsBadWritePtr
RemoveDirectoryA
FindAtomA
DeleteAtom
HeapCreate
FindClose
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE