Static task
static1
Behavioral task
behavioral1
Sample
a03dbd2fecfb082576ed585e41144ac28c1b0f66a271d4451f9d68efec53f397.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a03dbd2fecfb082576ed585e41144ac28c1b0f66a271d4451f9d68efec53f397.exe
Resource
win10v2004-20220901-en
General
-
Target
a03dbd2fecfb082576ed585e41144ac28c1b0f66a271d4451f9d68efec53f397
-
Size
28KB
-
MD5
19bb5995a1dd87bba65c64d425a18010
-
SHA1
6435f48f93822798fb75b56f5b94d29a38a57cb1
-
SHA256
a03dbd2fecfb082576ed585e41144ac28c1b0f66a271d4451f9d68efec53f397
-
SHA512
adb467e8ed95660dbec7945c8cf6625c485638d0952f5e807e137559a097b420dfe6855695cc5aefaa791cfdc25a418124a6068589df9d01f8ab976baf8ec316
-
SSDEEP
192:pdkicYakUaegOgCuDuhILuThXKvaFiTNqOZyk1grXWKU8sKR0yd/UJMGUPWWY685:VCPNfRQMOWborrrxivVzUI6OA6o
Malware Config
Signatures
Files
-
a03dbd2fecfb082576ed585e41144ac28c1b0f66a271d4451f9d68efec53f397.exe windows x86
2de8be3cf860280516bb5dbf36823d72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
OpenEventA
SetEvent
Sleep
DeleteFileA
GetCurrentProcess
GetModuleHandleW
CloseHandle
ReadFile
GetModuleHandleA
GetProcAddress
VirtualQuery
ExitProcess
GetCommandLineA
OpenProcess
GetShortPathNameA
GetEnvironmentVariableA
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
user32
CharUpperA
MessageBoxA
ExitWindowsEx
wsprintfA
PeekMessageA
advapi32
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
RegOpenKeyW
RegOpenKeyA
LookupPrivilegeValueA
shell32
ShellExecuteExA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE