Static task
static1
Behavioral task
behavioral1
Sample
a501a8ec46b967d55cd8b6d18614070b3b0e8b28456a74f5d9f3cb1bc1ca5d95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a501a8ec46b967d55cd8b6d18614070b3b0e8b28456a74f5d9f3cb1bc1ca5d95.exe
Resource
win10v2004-20220901-en
General
-
Target
a501a8ec46b967d55cd8b6d18614070b3b0e8b28456a74f5d9f3cb1bc1ca5d95
-
Size
198KB
-
MD5
6ac0dbf6fcbbed1394fdab7fc8fda360
-
SHA1
b44604f216589c443c0ab193a6f9dbb76234a7a6
-
SHA256
a501a8ec46b967d55cd8b6d18614070b3b0e8b28456a74f5d9f3cb1bc1ca5d95
-
SHA512
054efba26793593eedb2ba6dc56acdb31b39a837ba924e6768138be7bf9ab5620ec519c284cb092b13b12a024b326145bd6b010eddfbee76b454e440a98b05d1
-
SSDEEP
6144:ejm3/1gqZpEn3uAG77omxnjdHqp4olf+1+BkszKHWMrcW6XY:c8Kuan3MoIjVqv5XKHWMOXY
Malware Config
Signatures
Files
-
a501a8ec46b967d55cd8b6d18614070b3b0e8b28456a74f5d9f3cb1bc1ca5d95.exe windows x86
28413af80f76d9f103f93408f23e973c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetLocaleInfoW
CreateFiberEx
GetCurrentThreadId
TlsFree
TerminateJobObject
TlsAlloc
FoldStringW
EnumResourceNamesW
GetLastError
FlushFileBuffers
TlsGetValue
LoadLibraryA
Sleep
VirtualProtect
msimg32
AlphaBlend
user32
LoadIconW
RealGetWindowClass
MapVirtualKeyW
GetSystemMetrics
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ