Static task
static1
Behavioral task
behavioral1
Sample
a2ba0db249bec3d5201361ed353603c9f39fd861bf5325bf22a453f0351cad6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2ba0db249bec3d5201361ed353603c9f39fd861bf5325bf22a453f0351cad6f.exe
Resource
win10v2004-20220812-en
General
-
Target
a2ba0db249bec3d5201361ed353603c9f39fd861bf5325bf22a453f0351cad6f
-
Size
365KB
-
MD5
b98c0d9f88423734224197ff5a515337
-
SHA1
4dc29d21680992b5a9bce0e56de0be02c4cd5e61
-
SHA256
a2ba0db249bec3d5201361ed353603c9f39fd861bf5325bf22a453f0351cad6f
-
SHA512
817b8b080cadd40037053b42e9b6787b42c285077dc6f249d02f26d8e1723e6a0662adae97de370043291c2b38e237f687da438c57bfdaa25180bc78861ee6ff
-
SSDEEP
6144:ZlfPlrBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEoV:ZF5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+
Malware Config
Signatures
Files
-
a2ba0db249bec3d5201361ed353603c9f39fd861bf5325bf22a453f0351cad6f.exe windows x86
30b66925c95dfc838b507fb098d2e8e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
CreateFileA
CreateProcessA
FindResourceA
FindClose
DeleteAtom
GlobalFree
HeapCreate
PulseEvent
GetTickCount
CloseHandle
GetModuleHandleA
GetACP
GetEnvironmentVariableA
SetLastError
GlobalUnlock
CreateMutexA
ReleaseMutex
ExitThread
LoadLibraryA
user32
DrawEdge
GetIconInfo
GetDC
DefWindowProcW
CopyRect
FillRect
SetFocus
CallWindowProcA
DrawMenuBar
IsWindow
GetDlgItem
CheckRadioButton
DispatchMessageA
msasn1
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck
dpnet
DirectPlay8Create
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ