Static task
static1
Behavioral task
behavioral1
Sample
a4a6f22ca883333b7f573f4f01b6d2a5ac238c6c439214ad60248452079122e2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4a6f22ca883333b7f573f4f01b6d2a5ac238c6c439214ad60248452079122e2.exe
Resource
win10v2004-20220812-en
General
-
Target
a4a6f22ca883333b7f573f4f01b6d2a5ac238c6c439214ad60248452079122e2
-
Size
79KB
-
MD5
c774aad7fb254cabb87d89bdaf48442d
-
SHA1
285c2795f5a968040938b5ba771cb3b7748db929
-
SHA256
a4a6f22ca883333b7f573f4f01b6d2a5ac238c6c439214ad60248452079122e2
-
SHA512
c3263fbacfd766ac18fcdb09ee3a5b8d9f8630f9a115c73032145e5e192841e07d67dbaee8be5d4977554d4e0944fd45c546ac497bfcb1bd28d806e091911f84
-
SSDEEP
1536:3gVpUcjmxdG8ft7upcvy0O26+IoY3GvX4QzbV9CP1Cv7C3rs:3gVacSphupcvyX2Rw4X4Q3VS1Cv7C7
Malware Config
Signatures
Files
-
a4a6f22ca883333b7f573f4f01b6d2a5ac238c6c439214ad60248452079122e2.exe windows x86
0826a4d267bdfcee8835b3a8712b201e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryFileA
version
GetFileVersionInfoA
gdi32
GetRgnBox
SetPixel
ole32
CoRegisterClassObject
CoReleaseMarshalData
CoUnmarshalInterface
CreateStreamOnHGlobal
PropVariantClear
CoCreateFreeThreadedMarshaler
CreateBindCtx
advapi32
RegCreateKeyExA
RegOpenKeyExA
comdlg32
GetFileTitleA
GetOpenFileNameA
msvcrt
tan
memcpy
memmove
shlwapi
PathGetCharTypeA
SHSetValueA
PathIsDirectoryA
SHEnumValueA
SHDeleteValueA
oleaut32
SafeArrayGetElement
SafeArrayPtrOfIndex
kernel32
ExitThread
lstrlenA
WaitForSingleObject
LocalAlloc
LoadLibraryA
lstrcpyA
SetEvent
GetThreadLocale
VirtualAllocEx
GetProcAddress
SetThreadLocale
GetModuleHandleA
GetDateFormatA
GetCurrentProcess
comctl32
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Create
Sections
CODE Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 41KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE