Static task
static1
Behavioral task
behavioral1
Sample
a243716b201ae0eb95b27183b853445abd0d2485a71d3a29be2f56088a0a52a2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a243716b201ae0eb95b27183b853445abd0d2485a71d3a29be2f56088a0a52a2.exe
Resource
win10v2004-20221111-en
General
-
Target
a243716b201ae0eb95b27183b853445abd0d2485a71d3a29be2f56088a0a52a2
-
Size
385KB
-
MD5
9f2e22bb46fdae3d08796ec76e621593
-
SHA1
bf7dbe9f9610ff647b30ef06cffcc5207cb09d2d
-
SHA256
a243716b201ae0eb95b27183b853445abd0d2485a71d3a29be2f56088a0a52a2
-
SHA512
72076a658d6011605608dced0ab95cd6fa100e92178dbb72266946a00a8778b0359d8bcc2420d19d8385d051c51b68f642326194200ef6e9101c7d3843109fa6
-
SSDEEP
6144:WGoYmjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:AXSVKkY4UmR4rPx9kWKUZ+BXyZ/1p
Malware Config
Signatures
Files
-
a243716b201ae0eb95b27183b853445abd0d2485a71d3a29be2f56088a0a52a2.exe windows x86
579b628cc34ba57e35f92fc33221a0ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
LocalFree
GetEnvironmentVariableA
lstrlenA
GetCommandLineA
CloseHandle
FindVolumeClose
GetDriveTypeW
GetExitCodeProcess
ResetEvent
VirtualAlloc
WriteFile
CreateEventA
GetPrivateProfileIntW
CreateMutexA
GlobalFree
ResumeThread
InterlockedExchange
GetACP
GetModuleHandleW
user32
GetSysColor
CreateWindowExA
GetKeyboardType
GetSysColor
GetClientRect
DrawStateW
SetFocus
CallWindowProcW
GetClassInfoA
DispatchMessageA
GetCursorInfo
IsWindow
EndDialog
avicap32
videoThunk32
videoThunk32
AppCleanup
videoThunk32
videoThunk32
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ