Static task
static1
Behavioral task
behavioral1
Sample
398142bfa7c8541a9c47bdc7840d7b0d15aec72cb1c754b6fd7bd4b62a7c3307.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
398142bfa7c8541a9c47bdc7840d7b0d15aec72cb1c754b6fd7bd4b62a7c3307.exe
Resource
win10v2004-20220812-en
General
-
Target
398142bfa7c8541a9c47bdc7840d7b0d15aec72cb1c754b6fd7bd4b62a7c3307
-
Size
42KB
-
MD5
6fb2382c3ac00f63a2b2b271bf8bc591
-
SHA1
697168696824ec002ac1628152e851b35f0f28c7
-
SHA256
398142bfa7c8541a9c47bdc7840d7b0d15aec72cb1c754b6fd7bd4b62a7c3307
-
SHA512
f92f56b14180a62703112f9688995842cd19d9c862396b57019a75f84d83a60644be2b14484c8078858cd670e0eb8daac9bf95e1ed2d8242dc8b784e2c766142
-
SSDEEP
768:fLVGGxJUJAuGlLXw4yzlGzJvKSaZP4wxo:fDxZuMz+CHuo
Malware Config
Signatures
Files
-
398142bfa7c8541a9c47bdc7840d7b0d15aec72cb1c754b6fd7bd4b62a7c3307.exe windows x86
e7b4ac06320ce0185e1551e093d77248
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
TraceMessage
CheckTokenMembership
CreateWellKnownSid
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
kernel32
HeapFree
GetLastError
HeapAlloc
GetProcessHeap
LoadLibraryW
GetSystemDirectoryW
FreeLibrary
GetProcAddress
LocalFree
ProcessIdToSessionId
GetCurrentProcessId
HeapSetInformation
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryExA
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
UnhandledExceptionFilter
Sleep
InterlockedExchange
msvcrt
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_wcsicmp
_wcsnicmp
_wtoi
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
memset
_wcmdln
apphelp
SdbGetEntryFlags
SdbSetEntryFlags
SdbIsNullGUID
ntdll
RtlGUIDFromString
RtlInitUnicodeString
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bvofwsz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE