Static task
static1
Behavioral task
behavioral1
Sample
a111791b1c81b40b80aa5dd1b13353bd0bf2cba18fee1ce961f62b297ce8f6a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a111791b1c81b40b80aa5dd1b13353bd0bf2cba18fee1ce961f62b297ce8f6a0.exe
Resource
win10v2004-20220901-en
General
-
Target
a111791b1c81b40b80aa5dd1b13353bd0bf2cba18fee1ce961f62b297ce8f6a0
-
Size
811KB
-
MD5
9e69e9d8b95043056fad2efcdd812538
-
SHA1
75aa9060420d4d6d7bb8d9c21899d71c383b751f
-
SHA256
a111791b1c81b40b80aa5dd1b13353bd0bf2cba18fee1ce961f62b297ce8f6a0
-
SHA512
91ddcd50caefdf8692897df3c4547995a5e313be2d21c98ced46cecfc4f7e8d540f3dd3cd844fb9b24f6d8380d44410d14af6a70663e25990dd5dd985e91d799
-
SSDEEP
24576:8nf177c10+27BJwkWj6WM/TU1AqMS/l+UPz8ScrW7:8nf9A29B/T5U/lB
Malware Config
Signatures
Files
-
a111791b1c81b40b80aa5dd1b13353bd0bf2cba18fee1ce961f62b297ce8f6a0.exe windows x86
f41edcff6b8b711b5af917688eddb20d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
InitializeCriticalSection
GetDriveTypeA
GetTickCount
GlobalFree
RemoveDirectoryA
CloseHandle
GetLocalTime
EnterCriticalSection
WriteConsoleW
GetCommandLineW
TlsGetValue
VirtualProtectEx
GetModuleHandleA
GetFileSize
DeleteFileA
GetCalendarInfoW
FindClose
GetStartupInfoA
CreateDirectoryW
GetModuleFileNameA
LeaveCriticalSection
lstrlenW
CreateFileA
GetConsoleMode
user32
GetSysColor
GetWindowDC
FillRect
wsprintfA
DispatchMessageA
GetWindowLongA
IsWindowEnabled
EqualRect
MessageBoxA
GetWindowLongA
IsWindow
IsWindowVisible
PeekMessageA
cryptdlg
CertTrustCleanup
CertConfigureTrustW
CertTrustCertPolicy
CertConfigureTrustA
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE