Static task
static1
Behavioral task
behavioral1
Sample
d83901fe2ba7690e12ac3eed9a524ad8aad511e4adc477a9f7450f1f5c1fd0b1.exe
Resource
win7-20220812-en
General
-
Target
d83901fe2ba7690e12ac3eed9a524ad8aad511e4adc477a9f7450f1f5c1fd0b1
-
Size
119KB
-
MD5
67f0bdf2169645f628c5175d3d4eac61
-
SHA1
855a24df4fca4e62d0324804d34bd6914dd6d148
-
SHA256
d83901fe2ba7690e12ac3eed9a524ad8aad511e4adc477a9f7450f1f5c1fd0b1
-
SHA512
e14a37450a1e368dc02ce0a3ba0f6c2abe162e1cbd92c19ca036fe6f44a7b1a8457124b7a575a1739a933d30bb48a1be33214d216551ead714197a4294f2a92f
-
SSDEEP
1536:wgWTKaOUtZG90C615wuWe/VvjWNmvOtW3n8R0E7tOtGQg/wS0Ef2bX/a2g5yBhql:dnaOUjeRRuWe5otWX8Kx8t0jbX/G0hc
Malware Config
Signatures
Files
-
d83901fe2ba7690e12ac3eed9a524ad8aad511e4adc477a9f7450f1f5c1fd0b1.exe windows x86
b8546673ef5e19c4e3e052191df5818c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitializeSecurity
msvcr100
_except_handler4_common
_crt_debugger_hook
_invoke_watson
_controlfp_s
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
wcscat_s
memset
wcslen
_CxxThrowException
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
DecodePointer
EncodePointer
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
GetTickCount
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE