Static task
static1
Behavioral task
behavioral1
Sample
acfad831467d765908bcbd1f14ef1e8c5c4783495095e484b697b9c8a6f32afc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acfad831467d765908bcbd1f14ef1e8c5c4783495095e484b697b9c8a6f32afc.exe
Resource
win10v2004-20220812-en
General
-
Target
acfad831467d765908bcbd1f14ef1e8c5c4783495095e484b697b9c8a6f32afc
-
Size
328KB
-
MD5
8324f6a1f0558ef787f3e12c169eaece
-
SHA1
00c22464c9fde64bb5a81a1d8303ddceab816967
-
SHA256
acfad831467d765908bcbd1f14ef1e8c5c4783495095e484b697b9c8a6f32afc
-
SHA512
5092b81a1b3864a42d06962d331485f07cd4c15e761fafb6bfe7ec2ea3663d3ef958da4532fe0f0a6273c18c7e80fcfadf210cf802cb8c845b54bca7ac3973b3
-
SSDEEP
6144:f8sDB6abILJNXs1c9FMKoih7nVa5HQf/YRN2rTrorZUxbaB:fd5buNXCc9FMK6MgT2rTrolum
Malware Config
Signatures
Files
-
acfad831467d765908bcbd1f14ef1e8c5c4783495095e484b697b9c8a6f32afc.exe windows x86
4d826b1d4a9b045a9e26e69b568f0cbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
WriteConsoleW
GetStringTypeA
GetConsoleCP
Sleep
UnhandledExceptionFilter
QueryPerformanceCounter
CreateFileW
InitializeCriticalSection
GetFileSize
TerminateProcess
SetFilePointer
GetCommandLineW
GetUserDefaultLCID
GetTickCount
GetSystemDefaultLangID
GetModuleHandleA
GetVersion
GetCurrentThread
GetUserDefaultLangID
GetLastError
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
VirtualAlloc
lstrlenA
GetStartupInfoA
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
_strcmpi
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ