Static task
static1
Behavioral task
behavioral1
Sample
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe
Resource
win10v2004-20220812-en
General
-
Target
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da
-
Size
201KB
-
MD5
c54db77db9e433aff6eadf76fb879e2e
-
SHA1
b2d75d8861e4b1dec2c7eb2130e333e8ae72b399
-
SHA256
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da
-
SHA512
9fa881da3dd853609cd2edbda81236e8fcc1314d0fb23cb1708c8b3dfbf7ccabe3d15a6fafed9de1a17687695118142ddbd931547294c24dffc1f3142f1142a4
-
SSDEEP
3072:7VXHWHp4vhTOc+UAXnDi3dlzQm/9wXbGUN2wiooEtLqPors/DlZ5AEuKxUk:VHWHC6h1XnKnzbqbGw2wiovprmVTxb
Malware Config
Signatures
Files
-
a5b9edeb8c632b8dc272c42d13d53bda602acc82f007bc9bebc266e6c15735da.exe windows x86
a8c39d7b021525aa676543f82ef58406
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
ReadProcessMemory
GetCurrentProcess
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
IsDebuggerPresent
lstrcatA
GetStartupInfoA
msvcrt
fwrite
fclose
malloc
fopen
calloc
free
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 894B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE