Static task
static1
Behavioral task
behavioral1
Sample
a06ab7726eaf96c21d353dc9bdf590f1cf7aaa21946665f433a3cfa8263e9c43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a06ab7726eaf96c21d353dc9bdf590f1cf7aaa21946665f433a3cfa8263e9c43.exe
Resource
win10v2004-20220812-en
General
-
Target
a06ab7726eaf96c21d353dc9bdf590f1cf7aaa21946665f433a3cfa8263e9c43
-
Size
141KB
-
MD5
72b044273ad877642ed1557f887b36e2
-
SHA1
2564bde290f7b089ceef0405c60b31801507e95f
-
SHA256
a06ab7726eaf96c21d353dc9bdf590f1cf7aaa21946665f433a3cfa8263e9c43
-
SHA512
57c0f37f8bdc4c8484926e750067dc02ecff2ed1b02ac7aa342db70c0d0d731fde9e094c600923fb983b9acf490235409b3f5396220bfb6271b4f020829a026c
-
SSDEEP
3072:X/MQB3CqPErSGuOBicos4vwlGNhB4e3NNKv6e5:0Q1Mh61vwIhTWv6e5
Malware Config
Signatures
Files
-
a06ab7726eaf96c21d353dc9bdf590f1cf7aaa21946665f433a3cfa8263e9c43.exe windows x86
1f9a9ae09be6223087a483b4f1eb79c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AreAllAccessesGranted
RevertToSelf
RegQueryInfoKeyA
RegSetValueW
RegSetKeySecurity
AddAccessDeniedAce
SystemFunction001
kernel32
VirtualAlloc
GetConsoleTitleA
SetConsoleInputExeNameA
GetCalendarInfoA
gdi32
GetObjectType
SetICMProfileW
OffsetWindowOrgEx
Sections
.idata Size: 96KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ