Static task
static1
Behavioral task
behavioral1
Sample
a5edd21d52634e21821c992b164e82a667e80c40fed26ee17d999927f466ad47.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5edd21d52634e21821c992b164e82a667e80c40fed26ee17d999927f466ad47.exe
Resource
win10v2004-20221111-en
General
-
Target
a5edd21d52634e21821c992b164e82a667e80c40fed26ee17d999927f466ad47
-
Size
511KB
-
MD5
8b528937cb70a4249faf5588f3d6e431
-
SHA1
ff9e81c509d1860b8e9c5f89fa4a5702369cd3b8
-
SHA256
a5edd21d52634e21821c992b164e82a667e80c40fed26ee17d999927f466ad47
-
SHA512
29c4f8c7d6c7afd207582319ebc77907d3be593f1e6d383f6595761dbaad7d086d7e1696982602c4381e11a5dbd7437856cff7b8486c565b14abe282cd0d84af
-
SSDEEP
12288:0n4V0puvt8k7kEjINM10JDx5+sh8dJSJt:9Vfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
a5edd21d52634e21821c992b164e82a667e80c40fed26ee17d999927f466ad47.exe windows x86
890d96961c64973098c4b89220f96359
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateFileW
CloseHandle
GetModuleHandleA
GetDriveTypeA
HeapCreate
GetModuleFileNameW
LocalSize
HeapDestroy
GetStartupInfoA
IsDebuggerPresent
TlsAlloc
GetCommandLineA
FindClose
Sleep
DeviceIoControl
GetConsoleAliasA
lstrlenA
CloseHandle
CreateFileMappingW
user32
CallWindowProcW
GetIconInfo
DestroyWindow
IsWindow
IsZoomed
PeekMessageA
FindWindowW
DestroyMenu
LoadImageA
DispatchMessageA
DispatchMessageA
DrawTextW
GetWindowLongA
devenum
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 503KB - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ