Static task
static1
Behavioral task
behavioral1
Sample
a2402f11445ae93ad5e301b5fdf9cc23aaeab320d6d9f52baa47d9b05f97e196.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2402f11445ae93ad5e301b5fdf9cc23aaeab320d6d9f52baa47d9b05f97e196.exe
Resource
win10v2004-20220812-en
General
-
Target
a2402f11445ae93ad5e301b5fdf9cc23aaeab320d6d9f52baa47d9b05f97e196
-
Size
60KB
-
MD5
729f39ccce7fb4a92715c7f257215733
-
SHA1
a8c13b978f8e181062adc3ab0eab54f145e31b32
-
SHA256
a2402f11445ae93ad5e301b5fdf9cc23aaeab320d6d9f52baa47d9b05f97e196
-
SHA512
c21d8179329ea0c4f73a5fa9f82da749215706960d1a6f0f64a40f1c5b7612e8c38d98426a20406b9295537327d17a96fa593db2dc2bea92c04d8d7d63d60747
-
SSDEEP
768:DDhjgdzKPkd54IB0Bz6gti2GHchdPYClGro8Cd4jWFcDSYW4hoUDkYXCtOtdqicu:HhjyGBz6OGTCYr+Fc2Y7hoU8twdqiO
Malware Config
Signatures
Files
-
a2402f11445ae93ad5e301b5fdf9cc23aaeab320d6d9f52baa47d9b05f97e196.exe windows x86
a9e1eadfdf7bdd86052c98c4e27902be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
VirtualQuery
GetDriveTypeW
GetModuleHandleA
CloseHandle
lstrlenA
HeapCreate
CreateEventW
GetCommandLineA
GetEnvironmentVariableA
GetCommandLineA
GlobalFlags
CloseHandle
GetStartupInfoA
GetFileAttributesA
GetConsoleTitleA
HeapDestroy
GetTimeFormatW
SetLastError
EnumResourceTypesA
advapi32
CreateProcessAsUserA
IsValidSid
IsValidSecurityDescriptor
RegDeleteValueA
RegCreateKeyExW
IsValidSid
RegQueryValueW
InitializeSid
IsValidSid
IsValidAcl
RegEnumKeyA
IsValidSid
IsValidSid
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwggjmh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE