Static task
static1
Behavioral task
behavioral1
Sample
a1a604da826e6c0342847054831d219be0105a833319e6d4239ba9978e496fe3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a1a604da826e6c0342847054831d219be0105a833319e6d4239ba9978e496fe3.exe
Resource
win10v2004-20221111-en
General
-
Target
a1a604da826e6c0342847054831d219be0105a833319e6d4239ba9978e496fe3
-
Size
1014KB
-
MD5
181cbfed541a08af2800c57072ee3be2
-
SHA1
e5ce0d627972a1525f8159772548e1abf045128d
-
SHA256
a1a604da826e6c0342847054831d219be0105a833319e6d4239ba9978e496fe3
-
SHA512
0089b56c278260c50548ad76189cca2631989aa57989b0c5d79192d61633f52be66e8dd4915943495ad7784f200cde2d763e4535bc355429e67b60b7e7d8e95f
-
SSDEEP
24576:k5FLGiS88NY/auCdxfdnSnOVlBcf4XT5Zk/w0TuYrqFYnzS3Q:kHpS3NY/ar95BDVY3cg
Malware Config
Signatures
Files
-
a1a604da826e6c0342847054831d219be0105a833319e6d4239ba9978e496fe3.exe windows x86
ddd027e7da5ca21eb362af7eae1309a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
Sections
Size: 255KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mcvtszkd Size: 743KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
blhodnya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE