Static task
static1
Behavioral task
behavioral1
Sample
a2d2623ed1200259b7070df5a3b1260390fbbacd86faf3ab5c8abb2ae68ba12a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2d2623ed1200259b7070df5a3b1260390fbbacd86faf3ab5c8abb2ae68ba12a.exe
Resource
win10v2004-20220812-en
General
-
Target
a2d2623ed1200259b7070df5a3b1260390fbbacd86faf3ab5c8abb2ae68ba12a
-
Size
189KB
-
MD5
39e520b1e47840db19a79c6e31a91623
-
SHA1
f036c4d28b1c02402fb7984ddd300894064061c3
-
SHA256
a2d2623ed1200259b7070df5a3b1260390fbbacd86faf3ab5c8abb2ae68ba12a
-
SHA512
79ac167004a999f1540a0bb8f4b9a7e6d1aa0971812a4ab5525bfb049b81e7c08c0dcfaf86565b672a2af065e731b9e989fa5ff852b92512a48e720e67642bb9
-
SSDEEP
3072:tkCS2iO+1MtKWF5miD0h474fUDmCRNI6oWL10DXhSTpk:GhO6sF5vN4amCRiYhsB
Malware Config
Signatures
Files
-
a2d2623ed1200259b7070df5a3b1260390fbbacd86faf3ab5c8abb2ae68ba12a.exe windows x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE