Static task
static1
Behavioral task
behavioral1
Sample
a2034d4f82dcbb1592d064140ac80b6a42d9a2e7f2ac7db5c50f2cc62373c44b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a2034d4f82dcbb1592d064140ac80b6a42d9a2e7f2ac7db5c50f2cc62373c44b.exe
Resource
win10v2004-20220812-en
General
-
Target
a2034d4f82dcbb1592d064140ac80b6a42d9a2e7f2ac7db5c50f2cc62373c44b
-
Size
34KB
-
MD5
36c0c495c7698af23c7c0fb96238adb2
-
SHA1
34558880eff4d30e1334d87bda36d13bd3e37a2f
-
SHA256
a2034d4f82dcbb1592d064140ac80b6a42d9a2e7f2ac7db5c50f2cc62373c44b
-
SHA512
97d4285ad0838124381cc50caa1ce536ff3ef50e95550a297d276a484dd276dfe4e11724ceb4d5d9c3ba1b93d19d570793f78e75dad375493a8176d0bde6a2b2
-
SSDEEP
768:wsc0BYgkBs+7XkwLa/mQMsdF6QsbQ2MV:/nBYVX7oRYQq5M
Malware Config
Signatures
Files
-
a2034d4f82dcbb1592d064140ac80b6a42d9a2e7f2ac7db5c50f2cc62373c44b.exe windows x86
57f38e54702f629db8d577258ccf0e37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
LoadLibraryA
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetStdHandle
GetACP
SetConsoleCursorPosition
GetConsoleOutputCP
SetConsoleOutputCP
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
ExitProcess
oleaut32
SysAllocStringLen
SysFreeString
user32
CharUpperBuffW
CharLowerBuffW
MessageBoxA
ShowWindow
SetActiveWindow
GetForegroundWindow
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE