Static task
static1
Behavioral task
behavioral1
Sample
512ef5b78853a7bd0ad987c23e1eb1a743fb47f12fef24c02d721f5865de0961.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
512ef5b78853a7bd0ad987c23e1eb1a743fb47f12fef24c02d721f5865de0961.exe
Resource
win10v2004-20220718-en
General
-
Target
512ef5b78853a7bd0ad987c23e1eb1a743fb47f12fef24c02d721f5865de0961
-
Size
165KB
-
MD5
09cdec5540b9f8a2edc9f0036932270b
-
SHA1
d6d521ddffbc81b7bbdd807611f06f21f4029d5f
-
SHA256
512ef5b78853a7bd0ad987c23e1eb1a743fb47f12fef24c02d721f5865de0961
-
SHA512
e97326d10f904dc804bb1d04b151f7ec985ef325820af3466c5279db08bbe5a162c74d2c81417560c9d93b48998705863fe36c88de44e76ef759e07e569dad5a
-
SSDEEP
3072:HalqlanVwh9hCWsH/e4tJvV0NDOH1mtYwe2lTfJhwcl8zJOHyp:HaocnV09Nd4LvEDOH1xwVfG4
Malware Config
Signatures
Files
-
512ef5b78853a7bd0ad987c23e1eb1a743fb47f12fef24c02d721f5865de0961.exe windows x86
3ab783b5223a4537f3125add213d9edf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntdll
sin
pdh
PdhUpdateLogA
kernel32
DebugBreakProcess
DuplicateHandle
EraseTape
FileTimeToSystemTime
FindResourceExA
FreeConsole
GetCurrentThread
GetFileSize
IsSystemResumeAutomatic
OpenMutexW
QueryActCtxW
SetCalendarInfoW
SetConsoleOutputCP
SetFirmwareEnvironmentVariableA
TerminateThread
UnlockFileEx
VirtualQuery
VirtualQueryEx
lstrcmpW
msvcrt
atof
fgetws
fwscanf
user32
CreateMDIWindowW
gdi32
GetTextExtentPointW
mprapi
MprAdminConnectionGetInfo
MprConfigInterfaceSetInfo
MprInfoRemoveAll
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
#n05jP*s Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
%=wsZCx/ Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R-*eW Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 14KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bzeEu Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text0 Size: 46KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ