Static task
static1
Behavioral task
behavioral1
Sample
a5c4a33250a8968c810152710f8adc6dc363563a7ec500a335cbe1cb5509b106.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5c4a33250a8968c810152710f8adc6dc363563a7ec500a335cbe1cb5509b106.exe
Resource
win10v2004-20220901-en
General
-
Target
a5c4a33250a8968c810152710f8adc6dc363563a7ec500a335cbe1cb5509b106
-
Size
116KB
-
MD5
35e239ea9ffd33804b568295d287d915
-
SHA1
f00a3e63a1372e05ff464cf7198a07be78573e33
-
SHA256
a5c4a33250a8968c810152710f8adc6dc363563a7ec500a335cbe1cb5509b106
-
SHA512
4f902b2b6fa8cbb2b3d5a81867e54069722010fa3134e428800a684930f14dbf61cccad0c4f2cf04fdb176e7cb192fa043358902ca6342959df34312e81ae698
-
SSDEEP
3072:25Kex0ZHPTnkdIslKLEEAebiyObKysjYDRUvLTSXd:2XWZHwqs4LDTbiogVX
Malware Config
Signatures
Files
-
a5c4a33250a8968c810152710f8adc6dc363563a7ec500a335cbe1cb5509b106.exe windows x86
8e285fab2a302b994ad64148af6d4126
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
Beep
CallNamedPipeA
CancelWaitableTimer
CreateEventA
CreateFiber
CreateIoCompletionPort
DefineDosDeviceA
ExitProcess
FindAtomA
FindCloseChangeNotification
GetAtomNameA
GetCommandLineA
GetEnvironmentVariableA
GetExitCodeProcess
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
GetModuleHandleA
GetNamedPipeInfo
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetThreadLocale
GetThreadPriority
GetWindowsDirectoryA
GlobalFindAtomA
GlobalFree
GlobalUnfix
GlobalUnlock
LocalHandle
MultiByteToWideChar
OpenFileMappingA
ReadFile
SetUnhandledExceptionFilter
VirtualAllocEx
VirtualFree
WritePrivateProfileSectionA
WritePrivateProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
ftell
fwrite
malloc
memset
rewind
signal
strcpy
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE