Static task
static1
Behavioral task
behavioral1
Sample
12f8747042244b7d9e58ac5c938da950baa90ffb084ce791660af52aef0a659a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12f8747042244b7d9e58ac5c938da950baa90ffb084ce791660af52aef0a659a.exe
Resource
win10v2004-20220812-en
General
-
Target
12f8747042244b7d9e58ac5c938da950baa90ffb084ce791660af52aef0a659a
-
Size
140KB
-
MD5
5c22f7b7494cf64699d8199da65c8c30
-
SHA1
f504df01e3a6f2db9ca263ff90be84443ed1fe5f
-
SHA256
12f8747042244b7d9e58ac5c938da950baa90ffb084ce791660af52aef0a659a
-
SHA512
9224724a1b65129c0458e79f2a9b88fdff7c4e924d6cf45e75131a4bda95ecc7d0ac19e6377b0d21d2ff6390bd8993f3e82362e4a33db96dabfc73a30c3c90db
-
SSDEEP
1536:AFDGiSEoWNBlQ/O4ahPFVmpcgKcaZsm5ffnjVrslHzLkmfajWrHfPZgDfkb:AFDVSCblf9h9CcSm5DxSHxfai6fkb
Malware Config
Signatures
Files
-
12f8747042244b7d9e58ac5c938da950baa90ffb084ce791660af52aef0a659a.exe windows x86
cacf92084e7702acc2575378b5e79d98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lread
GlobalFree
GetCommandLineA
_lwrite
GlobalHandle
ExitThread
_lclose
GetCurrentDirectoryA
GlobalAlloc
lstrcatA
GlobalUnlock
FreeLibrary
GetWindowsDirectoryA
GetCurrentProcessId
GetVersion
_llseek
FindFirstFileA
GetVolumeInformationA
GlobalLock
DosDateTimeToFileTime
OpenFileMappingW
GetModuleFileNameA
SetConsoleNumberOfCommandsW
_lcreat
GetDriveTypeA
ExitProcess
SetErrorMode
lstrlenA
lstrcpyA
DeviceIoControl
WinExec
GetTimeZoneInformation
LocalFileTimeToFileTime
SetCurrentDirectoryA
SetFileTime
FindClose
GetEnvironmentVariableA
CreateDirectoryA
_lopen
GetModuleHandleA
GetProcAddress
lstrcmpiA
user32
ShowWindow
ChangeDisplaySettingsA
MessageBoxA
GetKeyNameTextA
advapi32
OpenSCManagerA
GetUserNameA
LookupPrivilegeValueA
OpenProcessToken
OpenServiceA
shlwapi
PathGetDriveNumberW
StrTrimA
PathRemoveBlanksA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 106KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
miwvzay Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE