Static task
static1
Behavioral task
behavioral1
Sample
a0ac1345ea8092d53922384b7246aeb4cb6934e2639e24ccf42b9617cc6015ae.exe
Resource
win7-20220901-en
General
-
Target
a0ac1345ea8092d53922384b7246aeb4cb6934e2639e24ccf42b9617cc6015ae
-
Size
268KB
-
MD5
6c661d4f7283ebcf63af02204cac631b
-
SHA1
f1042fcb2036578c954453cc9a856839c9803ad8
-
SHA256
a0ac1345ea8092d53922384b7246aeb4cb6934e2639e24ccf42b9617cc6015ae
-
SHA512
9aca353314b166acb20d56944505bc67856c260e9bf265f7b7fb377a298ca5cbb22e6b2c0e5a7c242edec905c15114cf008ceaa6f7383396fe97106b7700c772
-
SSDEEP
6144:grHClWpnsRi15xa46mi4ZPlNoodL3G/1acga7VTsAgykI4Fhwmo:gTCunK8a4FvP3ok3G9afaxTshRvwmo
Malware Config
Signatures
Files
-
a0ac1345ea8092d53922384b7246aeb4cb6934e2639e24ccf42b9617cc6015ae.exe windows x86
33342d3907d0034424f07ff5dc63bc33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
MultiByteToWideChar
GetModuleHandleA
VirtualProtect
lstrcmpiA
AddAtomA
GetDiskFreeSpaceA
LoadLibraryA
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetOEMCP
IsBadReadPtr
FlushFileBuffers
GetStringTypeA
GetTickCount
ReadFile
LeaveCriticalSection
CloseHandle
WriteFile
FreeLibrary
GetThreadLocale
InitializeCriticalSection
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
DeleteCriticalSection
EnterCriticalSection
lstrlenA
GetStringTypeW
EnumResourceNamesW
Sleep
lstrcatA
FreeEnvironmentStringsW
lstrlenA
FreeEnvironmentStringsA
GetProcAddress
SetFilePointer
LCMapStringW
GetFullPathNameA
IsBadCodePtr
GetCPInfo
lstrcpynA
LCMapStringA
SetStdHandle
CreateFileA
UnhandledExceptionFilter
lstrcpyA
FindFirstFileA
GetStartupInfoA
GetFileAttributesA
MulDiv
RaiseException
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 131KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ