Static task
static1
Behavioral task
behavioral1
Sample
a52a8205972b17e435d663a1549b9d82cd2c449488cdfb4cc3e911860985ee1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a52a8205972b17e435d663a1549b9d82cd2c449488cdfb4cc3e911860985ee1c.exe
Resource
win10v2004-20221111-en
General
-
Target
a52a8205972b17e435d663a1549b9d82cd2c449488cdfb4cc3e911860985ee1c
-
Size
984KB
-
MD5
35d155e412564c337ae412d8f759e74b
-
SHA1
1f9f97e51fd77c635fe3a067a3fa907272155682
-
SHA256
a52a8205972b17e435d663a1549b9d82cd2c449488cdfb4cc3e911860985ee1c
-
SHA512
4b282f5f623b4c78be0eb3a8b857406be3d4acdabdd3a6032287b4d8731396cf20525298bf8f92482ac29dcd6d7983c909c9869f80a1270bbccf38341552ff87
-
SSDEEP
12288:zTaxWoHkyfzj+h8aT7dVaZzexlI7r2h7a7ZZtNIxN+a8O6xYl5yPnYvjx4xkZP:zOIsBP+qs7dNxIK0HtNqw66x+cnIxB
Malware Config
Signatures
Files
-
a52a8205972b17e435d663a1549b9d82cd2c449488cdfb4cc3e911860985ee1c.exe windows x86
1729c901301d0c3789ea8ea8e4aa9687
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
UnregisterWaitEx
SetConsoleTextAttribute
GetOverlappedResult
EnumUILanguagesA
GetConsoleHardwareState
ExpungeConsoleCommandHistoryA
DeleteFileW
WriteConsoleInputVDMA
CreateToolhelp32Snapshot
GetFileSize
GetSystemDefaultLCID
GlobalFindAtomW
GetConsoleScreenBufferInfo
SetCriticalSectionSpinCount
GlobalHandle
MapUserPhysicalPagesScatter
GetCurrencyFormatA
SetupComm
SetLastError
GetConsoleCommandHistoryLengthA
SuspendThread
FatalExit
GetLocaleInfoW
BuildCommDCBAndTimeoutsA
DebugActiveProcess
GetLogicalDrives
WritePrivateProfileStringW
Sections
.data Size: 4KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 872KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ