Static task
static1
Behavioral task
behavioral1
Sample
a72c25217c90bfd9107c6e1329e75e6cde6f3f15b2ce3b6040a5a909bfa8b9cc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a72c25217c90bfd9107c6e1329e75e6cde6f3f15b2ce3b6040a5a909bfa8b9cc.exe
Resource
win10v2004-20221111-en
General
-
Target
a72c25217c90bfd9107c6e1329e75e6cde6f3f15b2ce3b6040a5a909bfa8b9cc
-
Size
19KB
-
MD5
0d2a2eab3a09036315e88c860e09a16b
-
SHA1
4a35ab1406e198fdf4386271c8fe0b2314044a01
-
SHA256
a72c25217c90bfd9107c6e1329e75e6cde6f3f15b2ce3b6040a5a909bfa8b9cc
-
SHA512
6e2f69fb6a72d5c31b5dcbac77748efa752953a4bfa4213a55ea6feca2dc3c29576c8e2aa8ed3077501900f0ee459411e5deafb43de2cb270b6f61487397dfd3
-
SSDEEP
192:FhsvKb5gotsoV80Wwah+xsdDvD1rjsDbhUjT72OAY/1t4gwlg0qYidB/5iipc0/0:zYwDVsvDxgfqHCK77xYiH5Npzs
Malware Config
Signatures
Files
-
a72c25217c90bfd9107c6e1329e75e6cde6f3f15b2ce3b6040a5a909bfa8b9cc.exe windows x86
8d921c5293c288c978697eb3f26a0ef4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
UnhandledExceptionFilter
VirtualAlloc
HeapAlloc
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegOpenKeyExW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 622B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata1 Size: 512B - Virtual size: 19B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ