Static task
static1
Behavioral task
behavioral1
Sample
a4e7af51009ed2a74f8e680d20b688ce58e171346d2cd63ae223d90f036535fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4e7af51009ed2a74f8e680d20b688ce58e171346d2cd63ae223d90f036535fc.exe
Resource
win10v2004-20220812-en
General
-
Target
a4e7af51009ed2a74f8e680d20b688ce58e171346d2cd63ae223d90f036535fc
-
Size
53KB
-
MD5
45e52acf5a11f11753cd50a24552d203
-
SHA1
6049c4b1604b475a626b6093522aae78cffd613c
-
SHA256
a4e7af51009ed2a74f8e680d20b688ce58e171346d2cd63ae223d90f036535fc
-
SHA512
3b760d731a586d49876154b5cbaee4dbcb4eeb59273e5fe4c2439791f3eb1b47e1c9b9f21a4f2190a7a0239401fabe962844be4462b93f91aaf2b22b14e5cf0f
-
SSDEEP
768:ckZzohqL3qCea3ugvfXLybAPsV7MlJQYrLg+H7MQzurLsHxC0WNpXVxQ:ckZzd3DeGugf5sFqPwY30g8fJVx
Malware Config
Signatures
Files
-
a4e7af51009ed2a74f8e680d20b688ce58e171346d2cd63ae223d90f036535fc.exe windows x86
1e1d46e3bf6a210f761f54a7abb04fc5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetTickCount
GetLastError
lstrlenA
user32
wsprintfA
advapi32
OpenServiceA
ntdll
strncpy
memset
memcpy
strlen
strcpy
strcmp
_allmul
wcscmp
wcscpy
wcslen
strstr
RtlUnwind
NtQueryVirtualMemory
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stgvgta Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE