Static task
static1
Behavioral task
behavioral1
Sample
a642c13237af641e02b59dee244fe8d702c96508221a9591452b29c384cffe2e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a642c13237af641e02b59dee244fe8d702c96508221a9591452b29c384cffe2e.exe
Resource
win10v2004-20220901-en
General
-
Target
a642c13237af641e02b59dee244fe8d702c96508221a9591452b29c384cffe2e
-
Size
747KB
-
MD5
99d957d6a77bc35fa313b9cc415682c5
-
SHA1
5d35da333a2889fa06b12a14ad56f91c2f45257f
-
SHA256
a642c13237af641e02b59dee244fe8d702c96508221a9591452b29c384cffe2e
-
SHA512
49455ce3839952d86f64d647e03f7045e4fe8b9a8d23baf8b16ef02ce5dd77a436cb127907b7d9574614e6036b35ce557e507b6ece469ac08eab123e7d0ecdea
-
SSDEEP
12288:aSoNVadUFJzTHlHrZd5pYpWctiWXf4uq8Zaj6v7FF///GeeRYMJdTAYa6hTAFV4s:aR7adUFfZO9lXf4WZtv7F1GJdTAYawAs
Malware Config
Signatures
Files
-
a642c13237af641e02b59dee244fe8d702c96508221a9591452b29c384cffe2e.exe windows x86
3c71848ac74eb7fc172569e93cc8e31b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
ExitProcess
SetEvent
GetEnvironmentVariableW
CloseHandle
GetCommandLineW
CreateFileA
ResetEvent
GetStdHandle
GetStartupInfoW
GetModuleHandleA
VirtualAllocEx
HeapSize
RemoveDirectoryA
GetTickCount
GetFileAttributesA
FindClose
DeleteFileW
CreateMutexA
SetLastError
WaitForSingleObject
user32
GetDC
GetDC
GetClassInfoA
PeekMessageA
GetDC
DispatchMessageW
GetWindowLongA
CallWindowProcW
DispatchMessageW
FindWindowW
FillRect
MessageBoxA
GetSysColor
mciwave
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ