Static task
static1
Behavioral task
behavioral1
Sample
a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b.exe
Resource
win10v2004-20220812-en
General
-
Target
a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
-
Size
46KB
-
MD5
54e5eed809442140c88b4ae73c41c51a
-
SHA1
3d92841336297b56e0f02d8033dbad87dc49836a
-
SHA256
a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b
-
SHA512
837113ad53caa805be80f6e480aac3d5ef8593da1db4cb30ee697b8675de68490ffdc5e08a751897a0ce739416951a3c44ae0a9ee2dd8635bf4133a4cb8a5b69
-
SSDEEP
768:e+ETv/8BMAANegaRsdedroXYqC6AYOsN8Ix225/xqN9aSFn201MdAS:/gvEBbANbamsuXY96AbsN8Ix2A/xS/Nw
Malware Config
Signatures
Files
-
a3e28caca668e40584ace8b831d075ed4f5b49790afca34e785c0221bd44b02b.exe windows x86
61dab08b002feac5e4d853c470fecad2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
FindAtomA
FindResourceA
SizeofResource
AddAtomA
LoadResource
LockResource
GetModuleHandleA
VirtualFree
FreeResource
ExitThread
user32
wsprintfA
VkKeyScanExA
WindowFromDC
WinHelpA
UnregisterHotKey
WaitForInputIdle
TranslateMessage
advapi32
CryptGetHashParam
CryptGenRandom
CryptDecrypt
CryptGetUserKey
RegQueryInfoKeyA
CryptGetProvParam
CryptDeriveKey
RegSetValueA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 79B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ