Static task
static1
Behavioral task
behavioral1
Sample
R980533211.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
R980533211.exe
Resource
win10v2004-20220414-en
General
-
Target
12c3cd6afeb0da63f0ef22c0f430665a489d477876fb97f55fb4466badd21571
-
Size
185KB
-
MD5
80d95f54fb018493a44ecd0b767488ee
-
SHA1
ba21da1c9929d198428f1027e8977710260e876c
-
SHA256
12c3cd6afeb0da63f0ef22c0f430665a489d477876fb97f55fb4466badd21571
-
SHA512
2a711052ee0ab534006ba9ec32d45fb1634b87fbab663cbc6c7fd6908c4006590e3bb1d9bbcf8b931d6cbed761ce39bc39df18bf312bf8338e724e5e0745c349
-
SSDEEP
3072:A15OaP4hFOEYRPuc0wIGk8YaPcpA2a2MJXbscKHjv/Zee4ZYpePOoI7bUjD205mE:aO/CQuPn2a2MAD14ZXsbia0EE
Malware Config
Signatures
Files
-
12c3cd6afeb0da63f0ef22c0f430665a489d477876fb97f55fb4466badd21571.zip
-
R980533211.exe.exe windows x86
9ed876b71653bd177f3f9aa7f136ad9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
InitializeSListHead
VirtualProtect
loadperf
LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
resutils
ResUtilGetMultiSzProperty
ResUtilIsPathValid
ResUtilSetPrivatePropertyList
ole32
DllGetClassObjectWOW
OleConvertIStorageToOLESTREAM
OleDestroyMenuDescriptor
HACCEL_UserUnmarshal
HGLOBAL_UserFree
setupapi
SetupQuerySpaceRequiredOnDriveW
SetupFindFirstLineA
SetupGetLineTextA
SetupDiSetDeviceRegistryPropertyW
SetupFindFirstLineW
oleaut32
VarDateFromR4
VarNot
RegisterTypeLi
ws2_32
gethostname
WSASocketW
setsockopt
WSACleanup
comdlg32
ChooseFontA
GetOpenFileNameW
PrintDlgA
user32
EnumThreadWindows
vcruntime140
_except_handler4_common
memset
api-ms-win-crt-runtime-l1-1-0
_exit
_seh_filter_exe
exit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_get_wide_winmain_command_line
_configure_wide_argv
_initialize_wide_environment
_cexit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 591KB - Virtual size: 591KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ