Static task
static1
Behavioral task
behavioral1
Sample
a1ab49fde25940fc362a7bfe8be5a7dbdbc0746828a12a45e464b19702321caf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1ab49fde25940fc362a7bfe8be5a7dbdbc0746828a12a45e464b19702321caf.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ab49fde25940fc362a7bfe8be5a7dbdbc0746828a12a45e464b19702321caf
-
Size
197KB
-
MD5
9bedfd3f340c2250b34caa1c7c01085d
-
SHA1
0e3ac57f79d9f6065fd71646113ce38ac9c91dce
-
SHA256
a1ab49fde25940fc362a7bfe8be5a7dbdbc0746828a12a45e464b19702321caf
-
SHA512
75613d08863b63c07ba82d07ff8939fb7928895d4b42af4828420f9e1c37c073c4bac3fe756c41df3d53daa32c3c11b5fe5fa324fca096b4891c578784f8024a
-
SSDEEP
3072:QQNLR0GTc6J8VFSRMZX6qxLb1EhNUrC5/vut39It3Sxa:VNLn8mU6Uv1wGt3Ot3S
Malware Config
Signatures
Files
-
a1ab49fde25940fc362a7bfe8be5a7dbdbc0746828a12a45e464b19702321caf.exe windows x86
055a4837c783f9fd0995fdea9183181e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_itoa
_strcmpi
__set_app_type
_itow
_except_handler3
atol
__mb_cur_max
strspn
abs
strncat
wcsrchr
_stricmp
wcsncpy
_stat
_splitpath
realloc
_wfullpath
_access
_initterm
fprintf
iswctype
kernel32
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetSystemTimeAsFileTime
GetModuleFileNameA
LoadLibraryA
ExitProcess
GetTickCount
GetLastError
GetVersion
PrivMoveFileIdentityW
FileTimeToSystemTime
GlobalWire
FindNextVolumeA
ResetEvent
SetComputerNameW
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ