Static task
static1
Behavioral task
behavioral1
Sample
a4fe7dc11ac0605ab09c094bc6cb930aea2ad8b94968e0cbb8e4f000cfbe82f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4fe7dc11ac0605ab09c094bc6cb930aea2ad8b94968e0cbb8e4f000cfbe82f8.exe
Resource
win10v2004-20220812-en
General
-
Target
a4fe7dc11ac0605ab09c094bc6cb930aea2ad8b94968e0cbb8e4f000cfbe82f8
-
Size
817KB
-
MD5
09621f66a328daaf8021c2234bc686dc
-
SHA1
27c87aac5887b0084f498b9bcb324fa910c9f805
-
SHA256
a4fe7dc11ac0605ab09c094bc6cb930aea2ad8b94968e0cbb8e4f000cfbe82f8
-
SHA512
6ac7edccecb3b81436230ff98239d011f9903f245a7b9ac0511df7c70eae822970acf043213da292a797f6bdfa2ec7bf67663fcd46242b648c4445fd72fdcbf0
-
SSDEEP
24576:7870f3oFnzNPMY4qW3PmWH/CXXnQTyxwvr3:Q70f3EnN6qEPm8/8gTd
Malware Config
Signatures
Files
-
a4fe7dc11ac0605ab09c094bc6cb930aea2ad8b94968e0cbb8e4f000cfbe82f8.exe windows x86
82527bd8a7053f4968edbb3c72368447
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteConsoleW
GetDiskFreeSpaceW
VirtualProtect
TlsGetValue
lstrcpynA
ReadFile
lstrcpynA
DeleteFileW
lstrcpynA
lstrcpynA
GetCurrentThreadId
lstrcatA
lstrcpynA
GetFileSize
lstrcpynA
GetCurrentDirectoryA
GetPrivateProfileIntA
CreateDirectoryW
GetCommandLineW
lstrcpynA
SetThreadPriority
lstrcpynA
VirtualFree
lstrcpynA
OpenMutexW
FormatMessageW
GetModuleHandleA
lstrcpynA
lstrcmpA
certcli
CAEnumFirstCA
CADeleteCA
CAEnumNextCA
CADeleteCertType
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ