Static task
static1
Behavioral task
behavioral1
Sample
a11edd346ed148c40f4ba97b2bec61a10aa779b086a4f7036516148a6cfd57e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a11edd346ed148c40f4ba97b2bec61a10aa779b086a4f7036516148a6cfd57e2.exe
Resource
win10v2004-20220812-en
General
-
Target
a11edd346ed148c40f4ba97b2bec61a10aa779b086a4f7036516148a6cfd57e2
-
Size
170KB
-
MD5
53a1e2fc75e390d0612f34ead246409f
-
SHA1
cf1e70387f19c0b4f9d6163e55d1ac45c2b12327
-
SHA256
a11edd346ed148c40f4ba97b2bec61a10aa779b086a4f7036516148a6cfd57e2
-
SHA512
bb88a224f26fe13ca7748576e054c108593ae3017c5188642d2be8972da261a9c94fffec8bba5cc86aece576fb61f552dffb3f2328570a414b1c39d8db26036d
-
SSDEEP
3072:oojtV5Ix3i05uck07YOgFkH2grz7Y0syJPsYa85ZcV:5KduckvOgFkVrn80kEc
Malware Config
Signatures
Files
-
a11edd346ed148c40f4ba97b2bec61a10aa779b086a4f7036516148a6cfd57e2.exe windows x86
ca6a0053b78436e49bb223d0b4e82a86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
VirtualAlloc
GetModuleHandleA
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetTickCount
GetStartupInfoA
oleaut32
SysAllocStringByteLen
SysFreeString
SafeArrayGetUBound
SafeArrayCreate
VariantClear
GetActiveObject
advapi32
RegCloseKey
RegOpenKeyExA
WmiReceiveNotificationsA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
WmiQuerySingleInstanceW
msvcrt
_cabs
_initterm
_assert
_acmdln
_adjust_fdiv
_atoi64
_beep
_exit
_c_exit
_chdir
__setusermatherr
_access
__set_app_type
_atoldbl
_controlfp
__p__commode
_except_handler3
_XcptFilter
__p__fmode
__getmainargs
exit
Sections
.textbss Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ