Static task
static1
Behavioral task
behavioral1
Sample
a7b89448df53e8659b2fab15d32de3c2a54419d6737bbc78fa526569b49d44cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7b89448df53e8659b2fab15d32de3c2a54419d6737bbc78fa526569b49d44cc.exe
Resource
win10v2004-20221111-en
General
-
Target
a7b89448df53e8659b2fab15d32de3c2a54419d6737bbc78fa526569b49d44cc
-
Size
120KB
-
MD5
4607d4876306da319126628f6482b571
-
SHA1
4da9abed4b175c234104c87ef55390d7da4f1dff
-
SHA256
a7b89448df53e8659b2fab15d32de3c2a54419d6737bbc78fa526569b49d44cc
-
SHA512
c18819fc02c5136a92e3ef04d1bd1d8803bf29ad4184baf344546766054776ee4ba419ca9c5c7ec05b91b42c9e4b79553385eed341bae06203b8250177d519b1
-
SSDEEP
3072:xHC91s7655nBeiQoExINu9cEkNO3SqF5/:d61s7655ngiQoAaumWVT
Malware Config
Signatures
Files
-
a7b89448df53e8659b2fab15d32de3c2a54419d6737bbc78fa526569b49d44cc.exe windows x86
83566480571108e3b0216f7efa0ea898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ClearCommBreak
CreateMailslotA
CreateMutexA
DeleteAtom
EraseTape
ExitProcess
FindAtomA
FindCloseChangeNotification
GetACP
GetAtomNameA
GetCommMask
GetCommandLineA
GetDriveTypeA
GetExitCodeThread
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetThreadLocale
GetTickCount
GlobalUnfix
GlobalUnlock
IsBadCodePtr
LocalLock
MapViewOfFileEx
OpenFileMappingA
ReadProcessMemory
ReleaseSemaphore
SetEvent
SetFilePointer
SetUnhandledExceptionFilter
WaitForMultipleObjects
WritePrivateProfileSectionA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fread
free
fseek
malloc
memset
rewind
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE