Static task
static1
Behavioral task
behavioral1
Sample
a2260c4f0b908c6f8d548ccd68b33ecf76a22b8e490f83cb448aa804489189e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2260c4f0b908c6f8d548ccd68b33ecf76a22b8e490f83cb448aa804489189e4.exe
Resource
win10v2004-20221111-en
General
-
Target
a2260c4f0b908c6f8d548ccd68b33ecf76a22b8e490f83cb448aa804489189e4
-
Size
132KB
-
MD5
295bef3152462a8ef813a3ca3b9e338a
-
SHA1
df7c7f0eedde79fe2ff85216a594f2313d7ff16f
-
SHA256
a2260c4f0b908c6f8d548ccd68b33ecf76a22b8e490f83cb448aa804489189e4
-
SHA512
a7b90de04cd67d1aacf050a9b0122588503af56a9d1f91a7f706d9b15a9b079ccddf95a285f32f40a936c003c45e27f82efa95fe07be09e668ac2db4a4920455
-
SSDEEP
3072:0lNJQylRbkO5XcpOdqHO8Xt2UyFfRhH8V7kQQBihGDtGp:kEysasOd5DFfRhH8gkGDto
Malware Config
Signatures
Files
-
a2260c4f0b908c6f8d548ccd68b33ecf76a22b8e490f83cb448aa804489189e4.exe windows x86
bebbbbb0ddf7e75f8b4564795015fb56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
EnterCriticalSection
Sleep
GetCurrentThreadId
LoadLibraryA
GetProcAddress
WriteConsoleW
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetStringTypeW
ws2_32
bind
closesocket
connect
socket
accept
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ