Static task
static1
Behavioral task
behavioral1
Sample
a5cea220d22636b5435660dae185a0642359b44a3c27bf5330bc10830f4f0aaf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5cea220d22636b5435660dae185a0642359b44a3c27bf5330bc10830f4f0aaf.exe
Resource
win10v2004-20220812-en
General
-
Target
a5cea220d22636b5435660dae185a0642359b44a3c27bf5330bc10830f4f0aaf
-
Size
48KB
-
MD5
d3fe1f8ed09d4e69ca1f09c9cb8d482e
-
SHA1
76de8514304991da238b53ed79d8e7562f21b1b9
-
SHA256
a5cea220d22636b5435660dae185a0642359b44a3c27bf5330bc10830f4f0aaf
-
SHA512
b0a16225b535cd6b60455e82abad03552fcc11bd6f25c29d873433b41871b5da2baf8f3af6d95a4778c221c1bdc30e9de838fae7980876b5b25436338b5840ea
-
SSDEEP
768:nc8tyIYGzLQaLJH43dwnwIesM8sE2FOaFE25at346+GNuvPUjo7FcN24BCeD1B/M:n/PzM6FRk8sQi5at8IuvP8F43cy
Malware Config
Signatures
Files
-
a5cea220d22636b5435660dae185a0642359b44a3c27bf5330bc10830f4f0aaf.exe windows x86
6452b0b5453a975f909ab6ec32c4a306
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
SizeofResource
GetCurrentThreadId
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentProcessId
SetUnhandledExceptionFilter
InterlockedDecrement
QueryPerformanceCounter
Sleep
GetCurrentProcess
FindResourceA
GetLastError
EnterCriticalSection
EndUpdateResourceA
GetTickCount
InitializeCriticalSection
LockResource
SetLastError
SetConsolePalette
CloseHandle
InterlockedIncrement
LocalFree
LeaveCriticalSection
EnumResourceNamesA
WideCharToMultiByte
HeapAlloc
MultiByteToWideChar
VirtualAlloc
DeleteCriticalSection
FreeLibrary
TerminateProcess
LoadLibraryA
GetProcAddress
UnhandledExceptionFilter
WriteFile
HeapSize
SetConsoleWindowInfo
ExitProcess
FreeResource
LoadResource
shell32
DuplicateIcon
IsLFNDrive
DragFinish
SHDefExtractIconW
Sections
.textbss Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ