Static task
static1
Behavioral task
behavioral1
Sample
a628d179bc1f2f12c1c4421e573cbaa67efcf789bd0aefabce27435947951040.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a628d179bc1f2f12c1c4421e573cbaa67efcf789bd0aefabce27435947951040.exe
Resource
win10v2004-20221111-en
General
-
Target
a628d179bc1f2f12c1c4421e573cbaa67efcf789bd0aefabce27435947951040
-
Size
810KB
-
MD5
766f18e28a3781aabe1153ea0845dd78
-
SHA1
6b821f0520aea35d07f88707a25708a6b6f1caff
-
SHA256
a628d179bc1f2f12c1c4421e573cbaa67efcf789bd0aefabce27435947951040
-
SHA512
1a09741f15411a3ede087a8bb46d0926cab3c933e786236000a30ef34bb7a60b52705899b4f4b6284117f035f5d8f596b7262fb0b2162085aecd250cfb4b76e9
-
SSDEEP
12288:mod+JEEsBs0wxMuHFsN38lRbCIlVuMdFgGobX6CHtP2KRLT4LJWXyMjG6dMwJ4l:l4mEGtWMulmVIlVprsP5RqRq5ewJI
Malware Config
Signatures
Files
-
a628d179bc1f2f12c1c4421e573cbaa67efcf789bd0aefabce27435947951040.exe windows x86
e3d45818f6e54a0583acfeff5b8fb126
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CreateDirectoryW
GetTickCount
GetModuleFileNameA
DeleteFileA
CreateFileA
RemoveDirectoryA
VirtualProtect
GetStartupInfoA
OpenSemaphoreW
TlsGetValue
LoadLibraryA
EnterCriticalSection
WriteConsoleW
GetEnvironmentStringsW
GetFileSize
CreateDirectoryA
OpenMutexA
ReadConsoleW
CloseHandle
GetCommandLineA
Sleep
lstrlenA
GlobalFree
SetLastError
user32
GetSysColor
DestroyMenu
DispatchMessageA
IsWindowEnabled
GetClassInfoA
IsWindow
CallWindowProcA
PeekMessageA
DispatchMessageA
FindWindowW
SetFocus
DrawTextA
GetWindowLongA
cmutil
??1CIniA@@QAE@XZ
??_FCIniA@@QAEXXZ
??1CIniW@@QAE@XZ
??_FCIniW@@QAEXXZ
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE