Static task
static1
Behavioral task
behavioral1
Sample
a0a041f2a20593acc4889e67414a0197c5bf2da18c3289e73fdcfbeb8fb5a35f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a0a041f2a20593acc4889e67414a0197c5bf2da18c3289e73fdcfbeb8fb5a35f.exe
Resource
win10-20230220-en
General
-
Target
a0a041f2a20593acc4889e67414a0197c5bf2da18c3289e73fdcfbeb8fb5a35f
-
Size
4.4MB
-
MD5
017009c0e055456001a4411dbdb11474
-
SHA1
aed96c3465010c1cf9f2b9c99457b7f472bd425d
-
SHA256
a0a041f2a20593acc4889e67414a0197c5bf2da18c3289e73fdcfbeb8fb5a35f
-
SHA512
fc084b7a5deaa936e752f8f0d411be7340c2c7b8c3e448ea1d589ca2394bd8a85cce763a8f2d84cf0ac7df6e765953f75b1c5c481c04f1367fd833bf68cbb4e8
-
SSDEEP
98304:auKHPSR+b8W/7gMYBE0ihf7WtNh2GexQWmGL7Vgr5FxlFiEGVhsMU:hKvSR2/7gM4E0GfStL25xQWx7KzPAm
Malware Config
Signatures
Files
-
a0a041f2a20593acc4889e67414a0197c5bf2da18c3289e73fdcfbeb8fb5a35f.exe windows x64
96d5fa481b9a65c7095d2725e96f5ddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetClipboardData
advapi32
RegSetValueExA
Sections
.text Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ryu56u0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ryu56u1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ryu56u2 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ