Static task
static1
Behavioral task
behavioral1
Sample
a0eaae1bc0ef4842693b3470f470ea9c75ead544dd4970554672677682003e82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0eaae1bc0ef4842693b3470f470ea9c75ead544dd4970554672677682003e82.exe
Resource
win10v2004-20220901-en
General
-
Target
a0eaae1bc0ef4842693b3470f470ea9c75ead544dd4970554672677682003e82
-
Size
1.4MB
-
MD5
ca3f2af2a82c38e9467c8c8d222405b7
-
SHA1
53660e232ad662a80c9d406c8d1dcc3f12d8dee4
-
SHA256
a0eaae1bc0ef4842693b3470f470ea9c75ead544dd4970554672677682003e82
-
SHA512
af22a293a22f23331ef089ea62e60eed6f406d2e25333e2bdf01df09c57186412b1ba9bb4e49eefa9ccf6681a82bdc68ee72218fea7aa8d637e1d147d6020cf9
-
SSDEEP
24576:VTWoa9+REK2PDu4uf7RWplSxO3DrXCaJu5Yrnu2wsB3jY0J3Uw2JA0rLY:Vrp2Pi4JgKrX3omnOcpx2J
Malware Config
Signatures
Files
-
a0eaae1bc0ef4842693b3470f470ea9c75ead544dd4970554672677682003e82.exe windows x86
e4721a603954164192d8eaf949c20780
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
RegisterConsoleVDM
Process32First
SetProcessWorkingSetSize
BuildCommDCBAndTimeoutsW
TryEnterCriticalSection
GetSystemWindowsDirectoryW
ReadProcessMemory
GetTempFileNameW
IsSystemResumeAutomatic
CreateTimerQueue
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA
FindVolumeMountPointClose
CreateJobSet
ReadConsoleOutputAttribute
ReplaceFileA
WaitForMultipleObjectsEx
IsBadReadPtr
ReadConsoleInputA
CreateFileW
GetCurrencyFormatW
ReadConsoleOutputCharacterA
GetBinaryType
GetComputerNameA
HeapValidate
Module32NextW
WritePrivateProfileStringA
FreeResource
PeekConsoleInputW
ReadConsoleOutputCharacterA
GetSystemRegistryQuota
SetTimeZoneInformation
GetSystemTimeAdjustment
BaseCheckAppcompatCache
HeapAlloc
GlobalWire
GetUserDefaultUILanguage
GetConsoleAliasExesLengthW
GetBinaryTypeW
GetConsoleWindow
GetCPInfoExA
InterlockedPushEntrySList
EnumResourceLanguagesA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ