Static task
static1
Behavioral task
behavioral1
Sample
a75df231f563b21284f4a4daa8a3de89de2f29de861a69effc35d92282c38ddf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a75df231f563b21284f4a4daa8a3de89de2f29de861a69effc35d92282c38ddf.exe
Resource
win10v2004-20220901-en
General
-
Target
a75df231f563b21284f4a4daa8a3de89de2f29de861a69effc35d92282c38ddf
-
Size
151KB
-
MD5
02a0f610d80ade68dd64e925bb8b8570
-
SHA1
cdfd0be6c083d1f35765122f24b5a44055087fd6
-
SHA256
a75df231f563b21284f4a4daa8a3de89de2f29de861a69effc35d92282c38ddf
-
SHA512
04f148d8e4f5a316b8f8a356132a52d5fb3470845aa7d7e5b8229298ae768273548afcf9fe726dcb01d53ce0ebbd2c914c9b0cc45a46281ffc2fc4ae29acf2aa
-
SSDEEP
3072:Qrdljb9SPZtI+JrBdUerafRUh5WH5LUp6qXP5is:QvaFJvU8eHZbc
Malware Config
Signatures
Files
-
a75df231f563b21284f4a4daa8a3de89de2f29de861a69effc35d92282c38ddf.exe windows x86
0854563ad115f0e32ddc3c97652ae6d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
LocalSize
LoadLibraryExA
SuspendThread
WaitForMultipleObjects
HeapReAlloc
InterlockedExchange
VirtualProtect
GetAtomNameA
GlobalUnlock
GetModuleHandleA
CloseHandle
GetCommandLineA
GetConsoleDisplayMode
lstrlenA
GetConsoleCP
WaitForSingleObject
GetVersion
GetTickCount
GetSystemDefaultLangID
HeapCreate
gdi32
DeleteDC
CreateICA
EndPath
GetStringBitmapA
GetTextColor
AbortPath
GetRgnBox
DeleteObject
GetFontData
EngLineTo
GetMetaFileA
CreatePalette
BeginPath
FloodFill
CreateFontA
GetMetaRgn
EqualRgn
Escape
Ellipse
rastapi
AddPorts
PortClose
DeviceListen
DeviceDone
DeviceConnect
dhcpsapi
DhcpAddServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ