Static task
static1
Behavioral task
behavioral1
Sample
a1acf2129b3870d5fb6dbd534cffa1ad887c32468d57f0ed91ce177b05e99231.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1acf2129b3870d5fb6dbd534cffa1ad887c32468d57f0ed91ce177b05e99231.exe
Resource
win10v2004-20221111-en
General
-
Target
a1acf2129b3870d5fb6dbd534cffa1ad887c32468d57f0ed91ce177b05e99231
-
Size
31KB
-
MD5
8d54c30a6ff8c5360213d6b7aab76f2a
-
SHA1
738fd031704f1026a98dce3810b37c8c377f3748
-
SHA256
a1acf2129b3870d5fb6dbd534cffa1ad887c32468d57f0ed91ce177b05e99231
-
SHA512
2f5461a81c2697455a1c8cd019014a5f24822d710a057fc54572fc4cfa101661b155abd02cf9ab9d6a5ec07df01064af7a180f69f8131175b7ba194f00436058
-
SSDEEP
768:oOQjBEHOCIkEcyNLVUCZh2DbrKeScw8DtL5e4S9Al:oOQjBEH55yN+CZSP3DtLpfl
Malware Config
Signatures
Files
-
a1acf2129b3870d5fb6dbd534cffa1ad887c32468d57f0ed91ce177b05e99231.exe windows x86
06233932488cf68b3c9fcc7bfe8d3f59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
CreateFileA
WaitForSingleObject
CreateEventA
CreateThread
GetProcAddress
LoadLibraryA
CreateMutexA
SetFilePointer
VirtualProtect
LockResource
LoadResource
FindResourceA
GetComputerNameA
SuspendThread
ResumeThread
LocalFree
VirtualAllocEx
DeleteFileA
ExitThread
VirtualAlloc
VirtualFree
GetModuleFileNameW
ExitProcess
GetModuleHandleA
LocalAlloc
user32
GetWindow
CreateDialogParamA
GetActiveWindow
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ