Static task
static1
Behavioral task
behavioral1
Sample
a0cb819c5bce221100771774759fd1fb14e872262ae39bdd126fe843ff82c0c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0cb819c5bce221100771774759fd1fb14e872262ae39bdd126fe843ff82c0c5.exe
Resource
win10v2004-20221111-en
General
-
Target
a0cb819c5bce221100771774759fd1fb14e872262ae39bdd126fe843ff82c0c5
-
Size
1.3MB
-
MD5
a4d80df57e29d29ec7f38775b34aa0d4
-
SHA1
c02c66725bf4c94cd403f070b3abb213e9086f39
-
SHA256
a0cb819c5bce221100771774759fd1fb14e872262ae39bdd126fe843ff82c0c5
-
SHA512
3df51eb3228ab17d96f811177f2ade92c3f9d072c0740b2b336aee54aca2b7171889b035fea83b70dac8fed5194b075af2df26a1f748eb6972d700b63dd2df78
-
SSDEEP
24576:taXXHgdodyWMEK8Kh68Pux/q2BL6KHvoUZX0/OJ:4XkodK5FhPuF9L6KHv1lrJ
Malware Config
Signatures
Files
-
a0cb819c5bce221100771774759fd1fb14e872262ae39bdd126fe843ff82c0c5.exe windows x86
6fdf506db8e777b118843c00a67e4054
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSetInformation
GetDiskFreeSpaceExA
GlobalSize
GetDateFormatA
RemoveDirectoryA
CreateNamedPipeA
UnlockFileEx
GetCommMask
GetLogicalDriveStringsA
FlushFileBuffers
EnumResourceNamesA
GetConsoleAliasesLengthW
GetFullPathNameA
VirtualAllocEx
FindFirstVolumeMountPointW
WriteFileGather
RtlMoveMemory
GetCurrentDirectoryA
DeleteTimerQueueEx
ResetEvent
TransmitCommChar
WaitForMultipleObjectsEx
ReadConsoleOutputCharacterA
RemoveDirectoryW
GetVDMCurrentDirectories
GetShortPathNameA
SetThreadUILanguage
FormatMessageA
LZInit
WaitNamedPipeA
GetStdHandle
GetUserDefaultUILanguage
GetPrivateProfileStringA
GlobalUnfix
SetConsoleTitleA
GetLastError
GetEnvironmentVariableA
GetCommandLineA
SetLocalTime
GetStdHandle
SetLocaleInfoA
lstrcpynA
WriteConsoleOutputA
SetConsoleDisplayMode
dpmodemx
SPInit
advapi32
CredFree
user32
GetWindow
DrawEdge
GetWindowTextLengthW
GetMenuBarInfo
DefDlgProcA
OemKeyScan
CharNextA
IsWindowInDestroy
GetMessageTime
BroadcastSystemMessageExA
RegisterWindowMessageA
UnloadKeyboardLayout
LoadMenuIndirectA
CallWindowProcA
CharUpperBuffW
PtInRect
OemKeyScan
ExitWindowsEx
GetForegroundWindow
SetWindowsHookA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 763KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ