Static task
static1
Behavioral task
behavioral1
Sample
a009e78d029f2cca113d1e909d96f573acc5cf4355829a5481e9602312eb7888.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a009e78d029f2cca113d1e909d96f573acc5cf4355829a5481e9602312eb7888.exe
Resource
win10v2004-20221111-en
General
-
Target
a009e78d029f2cca113d1e909d96f573acc5cf4355829a5481e9602312eb7888
-
Size
944KB
-
MD5
b530155cbf04746b2168f00996c89c7b
-
SHA1
0d9341d96bf79226b295319d818ec37264f5ddc7
-
SHA256
a009e78d029f2cca113d1e909d96f573acc5cf4355829a5481e9602312eb7888
-
SHA512
781ecaf6d744da7a4c3d355e75d6122bcc5c65b2cce6f6d457df5729b7b068a1e6965380afebe5e6caf5df05645367f47b81774e1307cfa89d676965663dc993
-
SSDEEP
12288:7IO+qEOQi6tdm4FShXcCpZqP7SEumOrvwcZzU5nzTBw9bOy6PjTGfbBjNkruFDN:7n+eQis9ShMCT5FPzcnZwdOfG1hkr6
Malware Config
Signatures
Files
-
a009e78d029f2cca113d1e909d96f573acc5cf4355829a5481e9602312eb7888.exe windows x86
38e126bba7e4088f62509f81903df981
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
LocalAlloc
LocalFree
DisableThreadLibraryCalls
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
InterlockedExchange
QueryPerformanceCounter
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
CreateThread
GetProcAddress
LoadLibraryW
FreeLibrary
ExitProcess
CreateFileA
GetStartupInfoA
GetTickCount
lstrlenW
gdi32
SetLayout
msvcrt
_chmod
setupapi
SetupDiGetDeviceInterfaceDetailW
Sections
.text Size: 540KB - Virtual size: 536KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ