Static task
static1
Behavioral task
behavioral1
Sample
a9fdad1c2399eccd459d4dcc2d2ade880407f4863b96b554808346d8b1a8a0b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9fdad1c2399eccd459d4dcc2d2ade880407f4863b96b554808346d8b1a8a0b0.exe
Resource
win10v2004-20221111-en
General
-
Target
a9fdad1c2399eccd459d4dcc2d2ade880407f4863b96b554808346d8b1a8a0b0
-
Size
181KB
-
MD5
51085c2bf76e11b3d01b3bae38939b78
-
SHA1
404540487a207880f2deb39359d0acd9030875c8
-
SHA256
a9fdad1c2399eccd459d4dcc2d2ade880407f4863b96b554808346d8b1a8a0b0
-
SHA512
ac91f68e78e82ce87b84a58ecb38bda9f9ae73239e98f31a85e0cb2ad5fd968d1794d4d215b3f2c36f56c256ec8f2594ec2313d397d95caf3797f2e9ba551d55
-
SSDEEP
768:4uBhH7XuzzTZ6rGxDzAdULz0Ei6zUaxt58kZVF+zMQQfyXdi8JxJ3eBB48IW/DtN:LhbXuV6r20qli6zpxXeYyXk8JxG485B
Malware Config
Signatures
Files
-
a9fdad1c2399eccd459d4dcc2d2ade880407f4863b96b554808346d8b1a8a0b0.exe windows x86
4a72e30c88063ba04f2599c6ebcb8591
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
HeapFree
LeaveCriticalSection
SetFilePointer
UnhandledExceptionFilter
SetLastError
GetTickCount
ReadFile
SetFilePointer
GetProcessHeap
lstrcpyW
lstrlenW
lstrcmpiW
DeleteCriticalSection
SetFilePointer
DeleteCriticalSection
FormatMessageW
lstrlenW
SetLastError
FormatMessageW
GetCommandLineW
GetLastError
LoadLibraryA
lstrcmpiW
GetProcessHeap
EnterCriticalSection
GetStartupInfoW
GetCommandLineA
lstrcpyW
GetModuleHandleW
GetSystemTimeAsFileTime
InterlockedIncrement
SetLastError
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
FormatMessageW
FreeLibrary
WriteFile
LeaveCriticalSection
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE