Static task
static1
Behavioral task
behavioral1
Sample
a773d39c6854d249260970d65963927eafb5f5f12c3d5f52df42ca1438f764f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a773d39c6854d249260970d65963927eafb5f5f12c3d5f52df42ca1438f764f6.exe
Resource
win10v2004-20220812-en
General
-
Target
a773d39c6854d249260970d65963927eafb5f5f12c3d5f52df42ca1438f764f6
-
Size
164KB
-
MD5
9cec070a253af16137de68bee0a6e2d3
-
SHA1
ed03372650b3879e8907efac413ae0460cb4a323
-
SHA256
a773d39c6854d249260970d65963927eafb5f5f12c3d5f52df42ca1438f764f6
-
SHA512
584fd95d255357683dd02385cb59c8d7d2ce14dee6818b2efb88f092e47736e300fdad8b2cf4014fa38f01d40a3387302d1c51a761f3b5b3c4a287c7e071d8de
-
SSDEEP
768:kz+Cw0D/OeBY2ebH3R6uxwm+E4xpdc8IVdPZsgbTaxDHgXEz9fNtjzSoKbtHytFZ:fCP6e2TfwpEkg3dhsg6x75rGoKxntoXX
Malware Config
Signatures
Files
-
a773d39c6854d249260970d65963927eafb5f5f12c3d5f52df42ca1438f764f6.exe windows x86
8a80f97b9c8e51a003056994f3c0cd25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetFileAttributesA
CopyFileA
WinExec
GetModuleFileNameA
CreateDirectoryA
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetCurrentDirectoryA
GetLastError
SetCurrentDirectoryA
DeleteFileA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
CloseHandle
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
SetFilePointer
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
user32
PostMessageA
GetForegroundWindow
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ