Static task
static1
Behavioral task
behavioral1
Sample
a259a7ce27ea30aec0e707fcfa0bc1341eaa17bc0f648b5a6d2436ad2ae75148.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a259a7ce27ea30aec0e707fcfa0bc1341eaa17bc0f648b5a6d2436ad2ae75148.exe
Resource
win10v2004-20220901-en
General
-
Target
a259a7ce27ea30aec0e707fcfa0bc1341eaa17bc0f648b5a6d2436ad2ae75148
-
Size
44KB
-
MD5
8129fd75664c548fe6468ba36992c1fc
-
SHA1
8886c94f58f0a585ed975ceea2e0f35cd4086fe9
-
SHA256
a259a7ce27ea30aec0e707fcfa0bc1341eaa17bc0f648b5a6d2436ad2ae75148
-
SHA512
a168dbcd60b5aa28c8ac18ba36a8d5f7073b008d9733df7448fecbfe7c19db4fd42d833fa7f373d93c6469f907c0a3f7101c2020f4431510e024b27377ac6ecf
-
SSDEEP
768:KnVRi8Vq3tqrZhJ9fmip6DaYi8wQX+wfe5YeVX3t:K3O3EJEm5dE+wfe5YkX3t
Malware Config
Signatures
Files
-
a259a7ce27ea30aec0e707fcfa0bc1341eaa17bc0f648b5a6d2436ad2ae75148.exe windows x86
fc6510308057536b449a665a159f0736
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
ReadFile
SetFilePointer
GetSystemDirectoryA
GetModuleFileNameA
Sleep
Process32Next
lstrcmpiA
lstrlenA
Process32First
CreateToolhelp32Snapshot
GetTempPathA
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
lstrlenW
MultiByteToWideChar
OpenProcess
CreateFileA
GetStartupInfoA
WriteFile
GetCurrentProcess
CloseHandle
user32
wsprintfA
advapi32
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
ole32
CoCreateGuid
msvcrt
_initterm
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE