Static task
static1
Behavioral task
behavioral1
Sample
a5510514984bd4101794c6eeb709b674f967b5672910e4432b88316372bebd0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5510514984bd4101794c6eeb709b674f967b5672910e4432b88316372bebd0c.exe
Resource
win10v2004-20220812-en
General
-
Target
a5510514984bd4101794c6eeb709b674f967b5672910e4432b88316372bebd0c
-
Size
1.0MB
-
MD5
a7225eb3c3a3f1962dd946de3b011faa
-
SHA1
610062bb4c6d329aa0ccc1b63e9fbddafac0e646
-
SHA256
a5510514984bd4101794c6eeb709b674f967b5672910e4432b88316372bebd0c
-
SHA512
815d3c477dcf1a9f4a9b17c362e26999f7b02700ab1a6eacd13d7561ac37f31f096befd213ef706c5bb8688685fe2d8f6726aa0e6dbb7b04ec118c84598521a1
-
SSDEEP
24576:IpPQ4yJZs2Q1B7Wl2NajuhZ0bisjonFHTZ0cbBRTGqnyg:isZiz7evjlxSzZ0cbXKqF
Malware Config
Signatures
Files
-
a5510514984bd4101794c6eeb709b674f967b5672910e4432b88316372bebd0c.exe windows x86
2939019b3e1c9516282f24ae4f08a1e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
ExitProcess
TerminateThread
msvcrt
_eof
_chkesp
_ctype
_except_handler2
_CItanh
advapi32
CloseEventLog
CryptGetHashParam
AdjustTokenGroups
CryptSetHashParam
DeleteAce
DuplicateToken
Sections
.text Size: 261KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE