Static task
static1
Behavioral task
behavioral1
Sample
1a628e2a8d35b163e59fdbf661f2ef89bff86bcc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1a628e2a8d35b163e59fdbf661f2ef89bff86bcc.exe
Resource
win10v2004-20221111-en
General
-
Target
1a628e2a8d35b163e59fdbf661f2ef89bff86bcc
-
Size
356KB
-
MD5
d5860e29990f88a52fe2fce579526abd
-
SHA1
1a628e2a8d35b163e59fdbf661f2ef89bff86bcc
-
SHA256
4d0eadaaf2fc5aa45084b75ce6e594f87ece7ac6ec409b02c9f905ed02a80a09
-
SHA512
6d14d6f30b1a867c442aa6545631c28d4c651576c6b21cc7ab135fe7992f2a05c4b88157e83c6234249563acbd9c2d32466905090e09b29621a84af8cefe0a4b
-
SSDEEP
6144:hEB2bf5N0QV8PGhnZtH+uHDCpSdz8a1miITR/72PwLoJvZ1mb:WGxSq8uhnZ3ElxvyPfJvm
Malware Config
Signatures
Files
-
1a628e2a8d35b163e59fdbf661f2ef89bff86bcc.exe windows x86
bb34d8e3b3eb92b30586e79937f29b91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
WaitForSingleObject
VirtualFree
GetSystemTime
ExitProcess
GetTempPathA
VirtualProtect
ResumeThread
GetLastError
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
GetFileType
GetPriorityClass
user32
OpenIcon
IsWindowUnicode
GetParent
InSendMessage
GetWindow
LoadIconA
gdi32
SelectObject
advapi32
CopySid
AddAce
ole32
CoInitialize
CoUninitialize
msvfw32
DrawDibStop
avifil32
EditStreamSetNameA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 950B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 653KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ