Static task
static1
Behavioral task
behavioral1
Sample
a0feb822ed11d67c107b99550f71b925cafe7fca9ef0389920e56863af59744b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a0feb822ed11d67c107b99550f71b925cafe7fca9ef0389920e56863af59744b.exe
Resource
win10v2004-20221111-en
General
-
Target
a0feb822ed11d67c107b99550f71b925cafe7fca9ef0389920e56863af59744b
-
Size
576KB
-
MD5
9611fdc63f18357d15ee22d24385b336
-
SHA1
b545b069bf3e6fbf03fdccdd4e8c443ce78a6c2c
-
SHA256
a0feb822ed11d67c107b99550f71b925cafe7fca9ef0389920e56863af59744b
-
SHA512
3142eba2b456286cb49fde6dd6b0caefe475d282aba0268945c94b21312ec5d93b11a2fbdb65169ac26dd4ef94a9ef110609e2c3c19bdc227838b9d3c0bd63b9
-
SSDEEP
12288:e4aXZJ6xS0cFGvplcj4WItdrehevYoF2kuwQa:SZgM0mWFtt/v3m
Malware Config
Signatures
Files
-
a0feb822ed11d67c107b99550f71b925cafe7fca9ef0389920e56863af59744b.exe windows x86
9aa4b329239e242ebd45c7871c8314b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
SaveDC
ole32
CoGetMalloc
comctl32
ImageList_Add
Sections
.MPRESS1 Size: 566KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE