Static task
static1
Behavioral task
behavioral1
Sample
a6423d45100f1fbba9a628a29f2de15d0630ba35a85577f83db9cfaf890a10bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6423d45100f1fbba9a628a29f2de15d0630ba35a85577f83db9cfaf890a10bf.exe
Resource
win10v2004-20220812-en
General
-
Target
a6423d45100f1fbba9a628a29f2de15d0630ba35a85577f83db9cfaf890a10bf
-
Size
98KB
-
MD5
5121e6ec1abdbfdb0874352386e3ae6d
-
SHA1
895cfa5ed8d59aa225994cefe9af6ee010fe2789
-
SHA256
a6423d45100f1fbba9a628a29f2de15d0630ba35a85577f83db9cfaf890a10bf
-
SHA512
147beb570c5a3b20712680d19c2a4fdf7df93e20225f5b49b26a011b55fb88fc330f138b11025b24ff03ca88a716172da7af7cf4d661b47c68cb535f8f4038f0
-
SSDEEP
1536:Lx2/rKJFfpANfZKb806rQIhD6LQQmPTsuyfT8WF+48hd2sxRSC:LxRxAVXTbsu9WY5v2sbSC
Malware Config
Signatures
Files
-
a6423d45100f1fbba9a628a29f2de15d0630ba35a85577f83db9cfaf890a10bf.exe windows x86
510adcf5f899d2e3f91d3aea21f6268a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_strnicmp
_initterm
_stricmp
_cexit
abort
free
_errno
strrchr
wcslen
_exit
__setusermatherr
_adjust_fdiv
fwrite
fprintf
_except_handler3
__getmainargs
fclose
__p__fmode
__p__commode
calloc
_acmdln
__set_app_type
kernel32
WaitForSingleObject
GetTempPathW
GetProcAddress
LoadLibraryExW
GetUserDefaultLangID
GetStartupInfoA
WriteFile
ReadFile
SetStdHandle
SetErrorMode
FreeLibrary
UnhandledExceptionFilter
VirtualProtect
DeleteFileW
WaitForMultipleObjects
GetEnvironmentStrings
DeviceIoControl
advapi32
RegFlushKey
LookupPrivilegeValueA
CryptReleaseContext
RegCloseKey
RegDeleteValueA
AddAccessAllowedAce
RevertToSelf
RegEnumKeyA
InitiateSystemShutdownA
RegDeleteValueW
QueryServiceStatus
gdi32
DPtoLP
SetMapMode
ArcTo
CreateBitmap
OffsetWindowOrgEx
CombineRgn
PlayMetaFileRecord
SetStretchBltMode
RectInRegion
CloseEnhMetaFile
oleaut32
SysAllocStringLen
SafeArrayRedim
GetActiveObject
SysFreeString
LoadTypeLib
SysStringLen
SafeArrayPtrOfIndex
SysStringByteLen
VariantCopyInd
SysReAllocStringLen
SafeArrayGetElement
user32
PostMessageA
GetSubMenu
DeleteMenu
GetScrollPos
GetSysColorBrush
OpenClipboard
ScrollWindow
GetDesktopWindow
EnumWindows
GetClientRect
LoadCursorA
GetLastActivePopup
FindWindowA
SetFocus
comctl32
ImageList_GetImageCount
InitCommonControlsEx
ImageList_GetIconSize
ImageList_Draw
CreateStatusWindowA
ImageList_GetIcon
ImageList_Write
InitCommonControls
ImageList_Destroy
ImageList_BeginDrag
ImageList_Replace
ole32
CoUninitialize
CreateBindCtx
IsAccelerator
StgOpenStorageOnILockBytes
OleSetMenuDescriptor
OleInitialize
StgCreateDocfileOnILockBytes
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ