Static task
static1
Behavioral task
behavioral1
Sample
a915940f0e87695b36b8ebfc0d137c2db773cefb31dd0f0d1f4296540ebf1692.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a915940f0e87695b36b8ebfc0d137c2db773cefb31dd0f0d1f4296540ebf1692.exe
Resource
win10v2004-20221111-en
General
-
Target
a915940f0e87695b36b8ebfc0d137c2db773cefb31dd0f0d1f4296540ebf1692
-
Size
767KB
-
MD5
1ac1df934301477bc0e8f331f9703746
-
SHA1
5aea2a258d8ba673991ed3580bd3f47835422def
-
SHA256
a915940f0e87695b36b8ebfc0d137c2db773cefb31dd0f0d1f4296540ebf1692
-
SHA512
7210902cf307dffa30df425d7fbb93cc51dfc4735ba60c7464e2381e3cd5e8c91f35aac846c45bc32d593a07a03bc5fed58be2cdf374b3a31a05812e81076e46
-
SSDEEP
12288:2Em6tfG+P+w8nhrbkTrBeme8AUPPsYwCNH4hs9ZV1FgpY27exe6uVcqHKPU:2EmQfG+9JBl4UcXVEVgpFqPU
Malware Config
Signatures
Files
-
a915940f0e87695b36b8ebfc0d137c2db773cefb31dd0f0d1f4296540ebf1692.exe windows x86
ef767f5927539a600d90f4e700a49cd9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileMappingW
CreatePipe
ReleaseMutex
GetCommandLineW
CloseHandle
CreateDirectoryW
CloseHandle
Sleep
DeleteFileA
CreateFileA
LoadLibraryA
GetVersion
RemoveDirectoryW
HeapDestroy
ReleaseSemaphore
GetFileSize
WriteConsoleW
CreateMutexA
RemoveDirectoryW
VirtualProtectEx
lstrlenA
OpenEventW
HeapSize
GetStdHandle
user32
IsZoomed
GetClassInfoA
DestroyMenu
GetWindowLongA
FindWindowA
PeekMessageA
CreateIcon
GetSysColor
MessageBoxA
DispatchMessageA
DrawTextW
DestroyMenu
IsWindow
eventcls
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE