Static task
static1
Behavioral task
behavioral1
Sample
a6817ac422ff8809ff32226dc490f779b8c84e2b583128ed403a8ded8b680872.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6817ac422ff8809ff32226dc490f779b8c84e2b583128ed403a8ded8b680872.exe
Resource
win10v2004-20220812-en
General
-
Target
a6817ac422ff8809ff32226dc490f779b8c84e2b583128ed403a8ded8b680872
-
Size
198KB
-
MD5
af98108a030987591da07a79e048b271
-
SHA1
7a414834d3ca376a563cad47ed88e22842fcf040
-
SHA256
a6817ac422ff8809ff32226dc490f779b8c84e2b583128ed403a8ded8b680872
-
SHA512
82f90719433e19bdb66abbeecbc116dfce732dafebdbdcfae9ea5e2e94629fe61c42e5004d9088a7aa200c4dcd39736eb1a759d8df6b7ea900696a7ca49de3f0
-
SSDEEP
3072:HImixYYzLAt9WSr0lVZ+si758BP6MJnZ3At9WSr0lVZ+si758BP6MJnZfAt9WSrL:HImkDW9Br2+hoJs9Br2+hoJg9Br2gz
Malware Config
Signatures
Files
-
a6817ac422ff8809ff32226dc490f779b8c84e2b583128ed403a8ded8b680872.exe windows x86
2117b772398160f63265d332d71afd78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strlen
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
WaitForMultipleObjects
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zaer Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE