Static task
static1
Behavioral task
behavioral1
Sample
a1ad425aeefd6e109d2cc0078cb57d643252b9605eee6b4b88b9f03295d2ae08.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a1ad425aeefd6e109d2cc0078cb57d643252b9605eee6b4b88b9f03295d2ae08.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ad425aeefd6e109d2cc0078cb57d643252b9605eee6b4b88b9f03295d2ae08
-
Size
88KB
-
MD5
5683a06b3796b39ad6e342aa8b9f4151
-
SHA1
725f48ad658eac9a446887830ce2a12f721aed1d
-
SHA256
a1ad425aeefd6e109d2cc0078cb57d643252b9605eee6b4b88b9f03295d2ae08
-
SHA512
793d06c842a46597077e04484712d75cf54bb882510b9f9d25bf38133ae951e75d330ab8407c2ac72a63bd94025658e1a6f0d7c741ac4ef8c63ef02235c6acf1
-
SSDEEP
1536:sg/ZCMCAPLagUc9s9PBTnGrVn70ThFN7zPE:5/ZCMCgXHs9PlnGrV70ThFNs
Malware Config
Signatures
Files
-
a1ad425aeefd6e109d2cc0078cb57d643252b9605eee6b4b88b9f03295d2ae08.exe windows x86
8b021bb6abf4cf63ef1887f16ce592ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
_except_handler3
__security_error_handler
strstr
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
strncpy
strncat
strlen
strchr
memcpy
??2@YAPAXI@Z
strcat
memset
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
CreateMutexA
ReleaseMutex
SetUnhandledExceptionFilter
GetModuleFileNameA
GetFileAttributesA
GetLastError
SetLastError
lstrcmpiA
lstrlenA
lstrcpyA
GetTempPathA
lstrcatA
FindResourceA
LoadResource
SystemTimeToFileTime
ExitProcess
CloseHandle
SetFileTime
FindClose
CreateFileA
FindFirstFileA
DeleteFileA
LocalFileTimeToFileTime
WriteFile
SizeofResource
MoveFileA
user32
wsprintfA
advapi32
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
OpenServiceA
shell32
SHGetFolderPathA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ