Static task
static1
Behavioral task
behavioral1
Sample
a604f9906196386d3f909eb2a4057016f45bb2a5f6b16f3bbac60d19536f4495.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a604f9906196386d3f909eb2a4057016f45bb2a5f6b16f3bbac60d19536f4495.exe
Resource
win10v2004-20221111-en
General
-
Target
a604f9906196386d3f909eb2a4057016f45bb2a5f6b16f3bbac60d19536f4495
-
Size
312KB
-
MD5
4ebf431d671611962d68b6339c75d832
-
SHA1
79144c3a4b4a7ee86ac8295859b7bf9599523fe9
-
SHA256
a604f9906196386d3f909eb2a4057016f45bb2a5f6b16f3bbac60d19536f4495
-
SHA512
4af4779d3b9f2d64bba42727006fcad5db0d298582ec66f89a95615ffcd4fa4842971a1665a2daae9d17720c6ac35be050bb9446f6eb62c991ce1d75d44e6345
-
SSDEEP
6144:jxrTuETVyp+zFTan/bdV+6A5iP2naGmzvXYu5aRCaMMQG:FWr+zUDvA5eYYvYiaPMY
Malware Config
Signatures
Files
-
a604f9906196386d3f909eb2a4057016f45bb2a5f6b16f3bbac60d19536f4495.exe windows x86
dcc795f2896ec9eb5b720b6b2ae48b5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetSystemDirectoryA
HeapCreate
IsDebuggerPresent
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsA
GetACP
ReadConsoleA
RaiseException
LoadLibraryExA
FlushFileBuffers
CreateFileA
GetLocaleInfoA
InterlockedExchange
VirtualProtect
GetCurrentProcessId
OpenMutexA
GlobalFree
SetEvent
GetCurrentThread
user32
GetWindow
ValidateRgn
BeginPaint
GetDlgItem
SetForegroundWindow
SetActiveWindow
FrameRect
GetClassNameA
DrawTextA
wsprintfA
GetWindowTextA
EndPaint
ReleaseDC
GetFocus
FillRect
ShowWindow
GetParent
IsIconic
GetCursorPos
crypt32
CertFindAttribute
CertDuplicateStore
CertCreateContext
CertCloseStore
CertControlStore
apphelp
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ