Static task
static1
Behavioral task
behavioral1
Sample
a1c156b28d6847339c6c9b31689c09fd01b5cf83c3429bc49f49ab2e5c96a9bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1c156b28d6847339c6c9b31689c09fd01b5cf83c3429bc49f49ab2e5c96a9bc.exe
Resource
win10v2004-20220812-en
General
-
Target
a1c156b28d6847339c6c9b31689c09fd01b5cf83c3429bc49f49ab2e5c96a9bc
-
Size
70KB
-
MD5
cd5c933aba47f1928b0ae9165516c1a2
-
SHA1
d88baa76d12ca74867b0d5c141a5b3e89af3a0ce
-
SHA256
a1c156b28d6847339c6c9b31689c09fd01b5cf83c3429bc49f49ab2e5c96a9bc
-
SHA512
9aac6553472c300601d7796622deec8a8a2ea42a55465669aa780c41871de9cde8858df2a9e015e0ee696ef2fb1fcbb5686eea0adee8fc45d237cba00864994b
-
SSDEEP
1536:YQJh+qvGALKwXlRj1qWBvB7J2SeYxl4h/d:xJYqjjdBvB7Jx4H
Malware Config
Signatures
Files
-
a1c156b28d6847339c6c9b31689c09fd01b5cf83c3429bc49f49ab2e5c96a9bc.exe windows x86
5ceb2198c41728247a3b2542d78b63e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mn^'g�#w�biԧ�t�y�gk*d@�k��tru�u:y�\23.�| - ���ex��v�l|a�se�f8c�y�fg��� ¿�*��-�h0���v� ��(ap#,j�lfmt6n��
GlobalAlloc
ReadFile
lstrlenA
MultiByteToWideChar
GetUserDefaultLCID
CloseHandle
SetFilePointer
CreateFiMv�T�ls��W��L� �(.uvo�@dt-fmKEd�d�@�Mn^'G�#w�bIԦ�t�Y�Gk*d@�K��TrU�u:Y�\23.�| - ���Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
ls��W��L� �(.uvo�@dt-fmKEd�d�@�Mn^'G�#w�bIԦ�t�Y�Gk*d@�K��TrU�u:Y�\23.�| - ���Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
.uvo�@dt-fmKEd�d�@�Mn^'G�#w�bIԦ�t�Y�Gk*d@�K��TrU�u:Y�\23.�| - ���Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
��{<eK��nU i�A��
�V�t��uh�IG��� �s��{<eK��nU i�A��
O� W
��6���ib/u}D�H�HO� W
JFvQTuY7eGAh���6���ib/u}D�H�HO� W
J]kd�tm�2a0@z@JFvQTuY7eGAh���6���ib/u}D�H�HO� W
J���Xz~,�}o�EsR-�g�ie
GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
�eku�
`d`f��o�fd�d�m��u��w�l�L��%l��G�vw`LnkKM@)VvY�Y
�d�m��u��w�l�L��%l��G�vw`LnkKM@)VvY�Y
%l��G�vw`LnkKM@)VvY�Y
VvY�Y
A'��L�s�e]�I3JX�A��t}a��,��s��cg18%�V��gRt�B}I�eg�1av {>d�hKH�oQ��J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
X�A��t}a��,��s��cg18%�V��gRt�B}I�eg�1av {>d�hKH�oQ��J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
��s��cg18%�V��gRt�B}I�eg�1av {>d�hKH�oQ��J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
�gRt�B}I�eg�1av {>d�hKH�oQ��J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
v {>d�hKH�oQ��J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
J�1V-G 0��to� ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
ti���oS�CuKH�/,nxC�L4Fd�9�D�C�-�ymu
�/,nxC�L4Fd�9�D�C�-�ymu
�-�ymu
S�S�uk��pD�veA�`բǶ�d5��tt���,~?|rH��~�����ƨ&:�n�")_��Bg#�n�n(txr`
Ƕ�d5��tt���,~?|rH��~�����ƨ&:�n�")_��Bg#�n�n(txr`
�,~?|rH��~�����ƨ&:�n�")_��Bg#�n�n(txr`
�ƨ&:�n�")_��Bg#�n�n(txr`
"5Tb�N��co'}d>6sbqbY�E�Jq�eV������H>S|H�~'��HG9�e�N�/�Ol=�G�zD�eS��eu�`3ispxTY�{�(��54�+��f@Mt�qJ�VC%
Jq�eV������H>S|H�~'��HG9�e�N�/�Ol=�G�zD�eS��eu�`3ispxTY�{�(��54�+��f@Mt�qJ�VC%
G9�e�N�/�Ol=�G�zD�eS��eu�`3ispxTY�{�(��54�+��f@Mt�qJ�VC%
u�`3ispxTY�{�(��54�+��f@Mt�qJ�VC%
�f@Mt�qJ�VC%
T�d���mowq}o~�D�VIV�|�1l�u?�e�"\Tm��� Ju`,U���}BfqB�QR
V�|�1l�u?�e�"\Tm��� Ju`,U���}BfqB�QR
\Tm��� Ju`,U���}BfqB�QR
BfqB�QR
gU>s LgP�
GAa�FlZ�HSL���>�in����tJ �YAmm�1l���<��i3v����0�Q{e2��CIϢp�zu����QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
L���>�in����tJ �YAmm�1l���<��i3v����0�Q{e2��CIϢp�zu����QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
��tJ �YAmm�1l���<��i3v����0�Q{e2��CIϢp�zu����QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
v����0�Q{e2��CIϢp�zu����QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
IϢp�zu����QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
�QN�r��`��%���.Z�~�piRţ�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
�_X�mc}A�2/v�]t+�z���ظ,r� �Y�@�*�GdUhq��m|y���$��aQ��4J���Xz~,�}o�EsR-�g�ie
�0�xb8G �.��$��
y�\23.�| - ���ex��v�l|a�se�f8c�y�fg��� ¿�*��-�h0���v� ��(ap#,j�lfmt6n��
��TrU�u:Y�\23.�| - ���Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
�t�Y�Gk*d@�K��TrU�u:Y�\23.�| - ���Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
�(ap#,j�lfmt6n��
C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
��Ex��V�L|a�se�F8C�Y�fg��� ¿�*��-�h0���v� ��(ap#,j�lFMT6N��
�-�h0���v� ��(ap#,j�lFMT6N��
fmt6n��
ord2
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ