Static task
static1
Behavioral task
behavioral1
Sample
a95261898dfae974d2eed901c8746b8d2231c017a71b7c78d261b6c3c077a4bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a95261898dfae974d2eed901c8746b8d2231c017a71b7c78d261b6c3c077a4bc.exe
Resource
win10v2004-20220812-en
General
-
Target
a95261898dfae974d2eed901c8746b8d2231c017a71b7c78d261b6c3c077a4bc
-
Size
66KB
-
MD5
123f26cf2da24d38d8bdb2cac6af11ac
-
SHA1
fa094943caf2bd4d5450b43c1cf0a00cfb963c1f
-
SHA256
a95261898dfae974d2eed901c8746b8d2231c017a71b7c78d261b6c3c077a4bc
-
SHA512
128ad8b796e39c3fdf239351664dd2861a001edb9d94d8b7d0e36ffe43fc52450ad2cee63afd9b236f91a46db75d1f479eac20334fe8bcb9b285d319fc262340
-
SSDEEP
1536:8eQWx7St68eLurykj43qkhy0tWIaH9fkgZ4BTYml60CMRe0Ckt93Ln:8eQsv8Au5wQIek5BT160XRmY5Ln
Malware Config
Signatures
Files
-
a95261898dfae974d2eed901c8746b8d2231c017a71b7c78d261b6c3c077a4bc.exe windows x86
1673b23b563b9b2304e9aaec3a7a3ff5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
EnterCriticalSection
GetModuleHandleW
TerminateProcess
Sleep
FreeEnvironmentStringsA
MultiByteToWideChar
DeviceIoControl
LCMapStringW
OpenProcess
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetEnvironmentStringsW
InitializeCriticalSection
GetCurrentProcessId
ExitProcess
UnhandledExceptionFilter
GetTickCount
VirtualProtect
FileTimeToSystemTime
SleepEx
GetModuleFileNameA
GetCurrentThreadId
DisableThreadLibraryCalls
user32
DefWindowProcW
SetWindowRgn
LoadStringW
OpenClipboard
OffsetRect
EnableWindow
GetSubMenu
RegisterClassExW
SetTimer
GetClassNameW
ScreenToClient
ValidateRect
IsWindowVisible
ole32
CoInitialize
gdi32
LPtoDP
advapi32
OpenSCManagerW
version
GetFileVersionInfoSizeW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ