Static task
static1
Behavioral task
behavioral1
Sample
a7af2785eb722544d0909ec888180c4270dda1e59478ccf9e43ef6fc5c2bbfaa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7af2785eb722544d0909ec888180c4270dda1e59478ccf9e43ef6fc5c2bbfaa.exe
Resource
win10v2004-20220812-en
General
-
Target
a7af2785eb722544d0909ec888180c4270dda1e59478ccf9e43ef6fc5c2bbfaa
-
Size
38KB
-
MD5
5c708620f1dbf296342e28079be015d8
-
SHA1
328b44adebfe0e5554e2ba541aaf71e7cac8558a
-
SHA256
a7af2785eb722544d0909ec888180c4270dda1e59478ccf9e43ef6fc5c2bbfaa
-
SHA512
9895febbd0fbeeb636716886d15c5cba5dad2be5dce4458517b292f4f173b4fd1bd7d43e742e57f00dd6e6fd0610d73b549cf8fc723126d42c175ab2f9ac212a
-
SSDEEP
768:kT8Rq9JsScRRyYQlNvdugKJBBW4nDvf5B0d7Fs5p:kT8Rq9mb6YQLFu3lPMFop
Malware Config
Signatures
Files
-
a7af2785eb722544d0909ec888180c4270dda1e59478ccf9e43ef6fc5c2bbfaa.exe windows x86
87cec21983050bd5cc1ee9a84da358dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
advapi32
FreeSid
comctl32
ImageList_Add
gdi32
SaveDC
ole32
IsEqualGUID
oleaut32
LoadTypeLib
shell32
SHGetMalloc
user32
GetDC
version
VerQueryValueA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 477B - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ