Static task
static1
Behavioral task
behavioral1
Sample
a403a43a180472c10ff4718f97d3f04bd8070ca6549229ba423aeec950e51bf0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a403a43a180472c10ff4718f97d3f04bd8070ca6549229ba423aeec950e51bf0.exe
Resource
win10v2004-20220901-en
General
-
Target
a403a43a180472c10ff4718f97d3f04bd8070ca6549229ba423aeec950e51bf0
-
Size
32KB
-
MD5
cd2a88d8e29bee50738b7a103cf3edab
-
SHA1
5ea8edec426ed717150dc4cbb7ac7f0cdf64e489
-
SHA256
a403a43a180472c10ff4718f97d3f04bd8070ca6549229ba423aeec950e51bf0
-
SHA512
d86e3251c87a1032aa42cffd45a77325e78f0fdc7508fb27d5b3efa6f61db0b94384b0d6fdb2fc29378993245dab81770b2869d3fe49af4832b64b00b47e1e4f
-
SSDEEP
384:PYV9xlTv0SdtX32BCW0UZCiEHluJkmlDFmqAyuIcf/pdph+56JrzXQ7emFFB9:+v0+nECWoiEHlSBAfIOd3+56JHaFFB9
Malware Config
Signatures
Files
-
a403a43a180472c10ff4718f97d3f04bd8070ca6549229ba423aeec950e51bf0.exe windows x86
054ce4731aca6278e5fe3ef635080168
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
Sleep
GetCurrentProcess
GetProcAddress
GetModuleHandleA
lstrcmpA
lstrlenA
SetLastError
ExitThread
CloseHandle
ExitProcess
GetLastError
OpenProcess
WriteFile
SetFilePointer
GetModuleFileNameA
lstrcpyA
CreateThread
LoadLibraryA
�yi��U+
K�fx>��1��֍yi��U+
$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
CopyFileA
SetFileAttributesA
� �L�ѽ���e��3��\���
p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
��s��м����X��կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�l�<S�I���cq6.��s��м����X��կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
T�5{8VX"��'٭>����l�<S�I���cq6.��s��м����X��կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
Y�\x���Q�G��_�C貱d7j(�T�5{8VX"��'٭>����l�<S�I���cq6.��s��м����X��կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
�Df�,^�A}뵉2;I���xÓY�\x���Q�G��_�C貱d7j(�T�5{8VX"��'٭>����l�<S�I���cq6.��s��м����X��կ������H�^�p� h��� #��\��'K��u���{1R@W�`tƘ�����$L�6�X��t%�@�C�bo��� �3�g�z��������jw���*֝����)Y�� �(^b��r-GNR拾�)z�.L����^팥�$�R�{��y�4BhߝV�K�fx>��1��֍yi��U+
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
EnumWindows
MapVirtualKeyA
FindWindowA
ShowWindow
GetWindowLongA
SetWindowLongA
EnumChildWindows
GetClassNameA
PostMessageA
GetWindowTextA
GetWindowThreadProcessId
advapi32
RegSetValueExA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetFolderPathA
psapi
GetModuleFileNameExA
shlwapi
PathAppendA
StrStrA
StrCmpNA
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE