Static task
static1
Behavioral task
behavioral1
Sample
a12ce2d39478be6b801162db13a6a81a7c69cb226ac4125a2c52a666d757f908.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a12ce2d39478be6b801162db13a6a81a7c69cb226ac4125a2c52a666d757f908.exe
Resource
win10v2004-20220812-en
General
-
Target
a12ce2d39478be6b801162db13a6a81a7c69cb226ac4125a2c52a666d757f908
-
Size
600KB
-
MD5
994b98e13637713a158d0f8d69a445e0
-
SHA1
635800abb5a3c6a13545afd2ec345a08a1abaccf
-
SHA256
a12ce2d39478be6b801162db13a6a81a7c69cb226ac4125a2c52a666d757f908
-
SHA512
2211b8dc77835fe845c11e7b1c100a7d923a944f34327b2fa916c52d5f53c38fcfc0169943a952a48406ecf84a10f1919cda4e0be9b9fb6d415cba90f6823c2c
-
SSDEEP
12288:untIw/aym9UkVYjNqmwCEmlqRY8iQRMz3rOBuY1vcqu:n1+kmwCEmMRWQRMZ6vcb
Malware Config
Signatures
Files
-
a12ce2d39478be6b801162db13a6a81a7c69cb226ac4125a2c52a666d757f908.exe windows x86
ee963dd2145443feeff6ec7c13eefbc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateEventA
HeapCreate
GetExitCodeProcess
InterlockedExchange
GetModuleHandleA
SetConsoleTitleA
GetStringTypeA
GetStartupInfoW
SetFileTime
CloseHandle
LoadLibraryA
GetFileSize
HeapSize
lstrcpyW
ReadFile
LeaveCriticalSection
GetLastError
lstrcatA
SetFileTime
IsBadWritePtr
SetFileTime
mstscax
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
shell32
ExtractIconA
DragAcceptFiles
DllUnregisterServer
StrChrA
DuplicateIcon
SHGetMalloc
SHGetDiskFreeSpaceA
SHGetSettings
DragFinish
ShellAboutA
SHFree
ShellMessageBoxW
DragQueryFileA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ