Static task
static1
Behavioral task
behavioral1
Sample
a1fef786681dd8fe38c83e1f07158ab4db0e7dfe79aa3dbecbf04529355d155e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1fef786681dd8fe38c83e1f07158ab4db0e7dfe79aa3dbecbf04529355d155e.exe
Resource
win10v2004-20220812-en
General
-
Target
a1fef786681dd8fe38c83e1f07158ab4db0e7dfe79aa3dbecbf04529355d155e
-
Size
370KB
-
MD5
6bdf140ea853105eb2dc13689a5c18df
-
SHA1
bb740922330e3f35c5f946a2c9b9a919fec17f83
-
SHA256
a1fef786681dd8fe38c83e1f07158ab4db0e7dfe79aa3dbecbf04529355d155e
-
SHA512
51919027fbd9a0420859a36c5cdf08dfbd5d2b8fa85a8a180d465233832ff860d42b4e1cf82404d00d7a91a6de5371d97e81e6b5dd1bd78f6ae8d7693e55094c
-
SSDEEP
6144:IIk9kmoMOXSyHyC3jRSaZjmi/KaeF/ae/X7FwHqYLAzBU:Qam8XVHjNSaZy0KaA/auX0h4
Malware Config
Signatures
Files
-
a1fef786681dd8fe38c83e1f07158ab4db0e7dfe79aa3dbecbf04529355d155e.exe windows x86
fb24acc23dd0b8f29b9055358832f3f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetCurrentThreadId
CreateMutexA
CreateFileA
LoadLibraryExW
VirtualQuery
lstrlenW
GetExitCodeProcess
GetStdHandle
DeleteAtom
GlobalUnlock
ReleaseMutex
GetProcessHeap
FindResourceA
GlobalFree
GetModuleHandleA
SetLastError
CloseHandle
HeapCreate
SetEnvironmentVariableA
user32
SetFocus
DispatchMessageA
IsWindow
GetDlgItem
DrawEdge
GetIconInfo
DrawMenuBar
CreateWindowExA
FillRect
CheckRadioButton
GetDC
CallWindowProcA
CreateMenu
ntshrui
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ