Static task
static1
Behavioral task
behavioral1
Sample
a888504a9469f62c32bc6365c36a25ca623133fbfbaf1492152de7c7e099cd73.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a888504a9469f62c32bc6365c36a25ca623133fbfbaf1492152de7c7e099cd73.exe
Resource
win10v2004-20221111-en
General
-
Target
a888504a9469f62c32bc6365c36a25ca623133fbfbaf1492152de7c7e099cd73
-
Size
315KB
-
MD5
d0c508182bf5da5f36c16f03866fc46a
-
SHA1
11dfe230e4ea4609262dcf37e3150da59a224534
-
SHA256
a888504a9469f62c32bc6365c36a25ca623133fbfbaf1492152de7c7e099cd73
-
SHA512
d49942b384255d4c24d0cc6eb360cf39916c182e426bdc0850f7b3552d86304a5fdea3a85c4b043607392b2bf1db4d8d008cd764f2e6e37277e06b4c533599c4
-
SSDEEP
6144:QfYaVKgY91Y6UBlK+OdcsLG9Tskvq3q64aociUgnKnxs2wJ/:QU91YhvOlghq66Z8/
Malware Config
Signatures
Files
-
a888504a9469f62c32bc6365c36a25ca623133fbfbaf1492152de7c7e099cd73.exe windows x86
0e0ac79a407f1daf07bba7c92afc5e1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
lstrlenA
CreateFileA
lstrcatA
CloseHandle
user32
GetSystemMetrics
msvcrt
memcpy
advapi32
RegOpenKeyExW
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ