Static task
static1
Behavioral task
behavioral1
Sample
a262b421d70966f59a66eb670bb049e94dce30a042c7c5d497e4a752334f416d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a262b421d70966f59a66eb670bb049e94dce30a042c7c5d497e4a752334f416d.exe
Resource
win10v2004-20221111-en
General
-
Target
a262b421d70966f59a66eb670bb049e94dce30a042c7c5d497e4a752334f416d
-
Size
309KB
-
MD5
01afe2110734d00274e3a38347eaa290
-
SHA1
e455863b0160d403d26ab66a36d52f3c9630b43a
-
SHA256
a262b421d70966f59a66eb670bb049e94dce30a042c7c5d497e4a752334f416d
-
SHA512
cfceb6f8c33539c99fa86d27449fb25cd74194291d57c7a0b51268c5acfd10df68d3e22630f6d2508f7680a9260bf4ae29abeae3e270f3973377d0f890c1e028
-
SSDEEP
6144:FSVJukBQ7vmxtU/7kflciiT4MkHM9jbz9zOgDaKY:FIYr7vmxtj/MZ9fBbeF
Malware Config
Signatures
Files
-
a262b421d70966f59a66eb670bb049e94dce30a042c7c5d497e4a752334f416d.exe windows x86
ecb8e76d65dbc31a92ebceeb32ae92d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
ExitProcess
GetACP
Heap32First
LoadLibraryA
InterlockedIncrement
lstrcpyW
GetPrivateProfileSectionA
FindResourceW
GetPrivateProfileIntA
VirtualAllocEx
GetPrivateProfileIntA
GetStringTypeW
GetDiskFreeSpaceW
lstrcmpA
GetModuleHandleW
GetExitCodeProcess
GetDiskFreeSpaceW
WriteFileEx
SetEnvironmentVariableA
GetLongPathNameA
GetCurrentDirectoryA
WaitForSingleObject
apphelp
ApphelpCheckIME
SdbCreateMsiTransformFile
AllowPermLayer
ApphelpCheckExe
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE