Static task
static1
Behavioral task
behavioral1
Sample
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe
Resource
win10v2004-20220812-en
General
-
Target
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a
-
Size
502KB
-
MD5
1622b2ea1ea1950b0e52c2c20fbd3ac0
-
SHA1
3ac595a36c3079484c9ce85d07b2569aa10b2adf
-
SHA256
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a
-
SHA512
622064e45a06a717e70e2db564a42ac1151a12e8709f4fdd236bd3529622d9205871c67039c8c771ac3df8c47b38e8cb143b1153aafc911de7de75a0ffe49fcd
-
SSDEEP
12288:jSmbN/XnX1HNOF1LeQ3jBZnhWZqkQCJ6m4H1Ph1ADO:jSmbN/XnXDwh3jBZWqbWyHpp
Malware Config
Signatures
Files
-
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe windows x86
4192c687c135852de36f2c8f8cf4834d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntW
GetExitCodeThread
lstrcmpW
GetFileAttributesA
GetModuleHandleA
CloseHandle
WaitForMultipleObjects
GetFullPathNameA
CreateEventA
FoldStringA
GetPrivateProfileSectionW
HeapCreate
lstrcmpiW
GetDiskFreeSpaceA
CreateDirectoryW
InterlockedExchange
GetDiskFreeSpaceA
CloseHandle
OpenMutexA
GetPrivateProfileIntW
GetFullPathNameA
GetEnvironmentVariableA
CloseHandle
certmgr
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 495KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ