Static task
static1
Behavioral task
behavioral1
Sample
a0c9a3031a56f9ae63dcf45e712221ef2251510c0c47246a2bc543e189d1e0d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0c9a3031a56f9ae63dcf45e712221ef2251510c0c47246a2bc543e189d1e0d2.exe
Resource
win10v2004-20221111-en
General
-
Target
a0c9a3031a56f9ae63dcf45e712221ef2251510c0c47246a2bc543e189d1e0d2
-
Size
143KB
-
MD5
438294a3bf6ff25a3a75ad0b49f71fc7
-
SHA1
e485ca187a272642df562dd2ffb0bc4bc5e3570f
-
SHA256
a0c9a3031a56f9ae63dcf45e712221ef2251510c0c47246a2bc543e189d1e0d2
-
SHA512
b4a115b9f687c908c9fc50f7ee0dfcd201da2d0d87fb23412b9de427f0b88c5774235a23b80179cdc8c6a24da3735680b4c2cab2d2e19f90b453fdf6a336efa5
-
SSDEEP
3072:Y9TI35gSgWxr7LKnU8kLMYfYRtcXwvIkPy6jY:SSRNr8uBStcXw1k
Malware Config
Signatures
Files
-
a0c9a3031a56f9ae63dcf45e712221ef2251510c0c47246a2bc543e189d1e0d2.exe windows x86
325f6bcfc233b625fb0e9cd884e76145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyA
RegCloseKey
comdlg32
GetSaveFileNameA
GetOpenFileNameA
msvcrt
memcpy
__set_app_type
_except_handler3
_acmdln
__setusermatherr
__p__commode
_controlfp
_XcptFilter
_adjust_fdiv
exit
__p__fmode
_initterm
_exit
__getmainargs
kernel32
GetStartupInfoA
HeapCreate
HeapAlloc
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ