Static task
static1
Behavioral task
behavioral1
Sample
a79028b72d146f8758a9ca1e23574e591243004d9668b1572dad194a017f2e88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a79028b72d146f8758a9ca1e23574e591243004d9668b1572dad194a017f2e88.exe
Resource
win10v2004-20221111-en
General
-
Target
a79028b72d146f8758a9ca1e23574e591243004d9668b1572dad194a017f2e88
-
Size
1.4MB
-
MD5
ce7aa2addd71f02fcf6187a33dfc3b78
-
SHA1
e30b9b47d287f79783a17360e3b155586027a993
-
SHA256
a79028b72d146f8758a9ca1e23574e591243004d9668b1572dad194a017f2e88
-
SHA512
83c8a0294c4c1021d3cf16293e3276c9d75fd8ac9ca2c74d5a251f366609b23576ceff42441ef8d360270bf79430efd6637027cd3a31726607b15d0107c8d181
-
SSDEEP
12288:kxoQwG6hRM2fGI+23Q4Thfi/n51NcM1glXdqP1nYKqLMR2ehthhz1JFazvH9KDAY:A6hRZf9b3NNKv5hSlXdqPeIFtT1ifaTp
Malware Config
Signatures
Files
-
a79028b72d146f8758a9ca1e23574e591243004d9668b1572dad194a017f2e88.exe windows x86
314a8e14a8d7f8fdce5ae404fa086d52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoA
FindNextVolumeMountPointA
SetComputerNameExA
GlobalFix
LZCloseFile
GetVersion
GetProfileIntA
IsProcessorFeaturePresent
VirtualAlloc
WriteConsoleA
SetThreadContext
EndUpdateResourceA
ReadConsoleInputA
EnumResourceNamesA
ClearCommError
GetThreadPriority
GetNumberFormatA
SetProcessPriorityBoost
HeapFree
GetConsoleMode
GetCommState
GetVersionExA
GetTempPathA
FileTimeToLocalFileTime
dpnlobby
DirectPlay8LobbyCreate
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 832KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ