Static task
static1
Behavioral task
behavioral1
Sample
a830efd81418084c833c9a19ac8a37d0dd62c20632b379db21b635e62fd9f8bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a830efd81418084c833c9a19ac8a37d0dd62c20632b379db21b635e62fd9f8bc.exe
Resource
win10v2004-20220812-en
General
-
Target
a830efd81418084c833c9a19ac8a37d0dd62c20632b379db21b635e62fd9f8bc
-
Size
21KB
-
MD5
a87583c1eeda7d7b80f5d1f984ac6d85
-
SHA1
d5e2c1965e1f7ecb2af552d19d32e07db85b6f61
-
SHA256
a830efd81418084c833c9a19ac8a37d0dd62c20632b379db21b635e62fd9f8bc
-
SHA512
e21eed68eff33f1516181ace85082fee9e2d39297a01f785c051619bd534288e4b717492fb8034a52d7f85c528a04da8b1dad8aeea496cd976b198761dea6feb
-
SSDEEP
384:oOYlctzqioo9gRfFwHrNgTcWpzh3I7EEBYMm9my7/+TLBPrEwg6:ClctWi8RfFwHrOTfpzh35EBYDj70BPb
Malware Config
Signatures
Files
-
a830efd81418084c833c9a19ac8a37d0dd62c20632b379db21b635e62fd9f8bc.exe windows x86
96e0b642e7a1dd790f5d01b43e97db27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
ExitThread
FreeLibrary
GetComputerNameA
GetDriveTypeA
GetLogicalDrives
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetTempFileNameA
GetTempPathA
CreateThread
DeviceIoControl
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
CloseHandle
SetFileAttributesA
SetFilePointer
Sleep
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
CompareStringA
CreateFileA
CreateEventA
GetTickCount
GetVersionExA
ReadFile
user32
GetMessageA
PostQuitMessage
RegisterClassA
SendMessageA
TranslateMessage
PostMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CharUpperA
advapi32
RegCloseKey
RegEnumKeyExA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE