Static task
static1
Behavioral task
behavioral1
Sample
a40fcb1faf85e6615dae430a2a8df45a6a09ff103affedfd2ef3a7e6cdee8d01.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a40fcb1faf85e6615dae430a2a8df45a6a09ff103affedfd2ef3a7e6cdee8d01.exe
Resource
win10v2004-20221111-en
General
-
Target
a40fcb1faf85e6615dae430a2a8df45a6a09ff103affedfd2ef3a7e6cdee8d01
-
Size
44KB
-
MD5
8959ff66e095613edcac6b2c3ceabfa8
-
SHA1
2870ecfc5dd4ab6e25011c8d77dede187af6bf3d
-
SHA256
a40fcb1faf85e6615dae430a2a8df45a6a09ff103affedfd2ef3a7e6cdee8d01
-
SHA512
1f788391f66e674690d294ccb6388734d4f344af27f806eaf718b04140b4fc662776c77baa713293db67b68e6aaf1a5d4cfe72b665b659b9e8dd448ee8f3a7b2
-
SSDEEP
768:mculDm8K26r9GgbvyjTENNaEEefZna6ocsy:mcNZ9vy/amcucsy
Malware Config
Signatures
Files
-
a40fcb1faf85e6615dae430a2a8df45a6a09ff103affedfd2ef3a7e6cdee8d01.exe windows x86
7da0d5205e47178283e5577fa57c3134
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemDirectoryA
GetOEMCP
GetACP
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
HeapFree
VirtualFree
GetCPInfo
CreateProcessA
HeapCreate
HeapDestroy
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapReAlloc
HeapAlloc
ExitProcess
GetProcAddress
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
VirtualQuery
user32
FindWindowA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
RegisterWindowMessageA
LoadMenuA
GetSubMenu
LoadIconA
PostQuitMessage
SendMessageA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DefWindowProcA
DispatchMessageA
gdi32
GetStockObject
shell32
Shell_NotifyIconA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ