Static task
static1
Behavioral task
behavioral1
Sample
a15549aabac2d6c3bbc85d6c70754141154f6856617529c8dcdbff02c0744b72.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a15549aabac2d6c3bbc85d6c70754141154f6856617529c8dcdbff02c0744b72.exe
Resource
win10v2004-20220901-en
General
-
Target
a15549aabac2d6c3bbc85d6c70754141154f6856617529c8dcdbff02c0744b72
-
Size
24.9MB
-
MD5
bd333f569623dab54a846bfa0e77f9d4
-
SHA1
6439bec638a1556002281cbe88f0ef90dc0d80ab
-
SHA256
a15549aabac2d6c3bbc85d6c70754141154f6856617529c8dcdbff02c0744b72
-
SHA512
b8305105007ea5b309936c8fec70e0de031fa8ca81cb6cba6b651908dc8b432125fec1a32b16ffca443dd5b9ed79cd514701d0e931eb4cda110e424eb3e54ef5
-
SSDEEP
786432:GMHSnx7w5o9wU2ae3RHt/0w5c9E0M8SEATi:XU9w5o6hHt/7dp8TATi
Malware Config
Signatures
Files
-
a15549aabac2d6c3bbc85d6c70754141154f6856617529c8dcdbff02c0744b72.exe windows x86
8e2d38e8499fbff967379f1edc9f7b0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetProcAddress
GetLocaleInfoW
GetModuleHandleA
ResumeThread
IsValidLocale
SetUnhandledExceptionFilter
EnterCriticalSection
SetErrorMode
user32
LoadAcceleratorsA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
Sections
A Size: 2KB - Virtual size: 988B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W Size: 2KB - Virtual size: 794B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 2KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kJv Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
JOK Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
Z2p Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ