Static task
static1
Behavioral task
behavioral1
Sample
32d088f3e4c6c388c3cfdada8d63afcaf2b77c25bbbc79802244db11ca15a74f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
32d088f3e4c6c388c3cfdada8d63afcaf2b77c25bbbc79802244db11ca15a74f.exe
Resource
win10v2004-20220812-en
General
-
Target
32d088f3e4c6c388c3cfdada8d63afcaf2b77c25bbbc79802244db11ca15a74f
-
Size
123KB
-
MD5
a85b108e70718d63d2fa41016c6a1c52
-
SHA1
759151d82209286230180471aad609abf399d9c6
-
SHA256
32d088f3e4c6c388c3cfdada8d63afcaf2b77c25bbbc79802244db11ca15a74f
-
SHA512
7916dcf766999e977c83a1eb322a145cab022bb7f0d61b90cab525beea611c6253f4956cd0a133f53c30214a7941bb9704304517710d54e678936490f8ab02cf
-
SSDEEP
3072:a7CQO8kBRX9nGkNHVQRiB6vLkz3YQ0N4GyYhba+RVBrI0xbJs:A9O8i9nS3vLkzYQ0O4bXhM0xa
Malware Config
Signatures
Files
-
32d088f3e4c6c388c3cfdada8d63afcaf2b77c25bbbc79802244db11ca15a74f.exe windows x86
47f0cece0f81697dcc5290cf4ece9c78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
CreateThread
OpenEventA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
Sleep
GetTickCount
RtlUnwind
TerminateProcess
user32
MessageBoxA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 654B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ