Static task
static1
Behavioral task
behavioral1
Sample
a889736390c1115814a208d258bae3c54755dac82293e17c82cca04ba3823dd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a889736390c1115814a208d258bae3c54755dac82293e17c82cca04ba3823dd7.exe
Resource
win10v2004-20220812-en
General
-
Target
a889736390c1115814a208d258bae3c54755dac82293e17c82cca04ba3823dd7
-
Size
64KB
-
MD5
499816f4dcec77e1722e318c8515bc00
-
SHA1
8dbf025b10f840adf835e9ab9e73600d9da8335a
-
SHA256
a889736390c1115814a208d258bae3c54755dac82293e17c82cca04ba3823dd7
-
SHA512
aa92806b082e5f6ca1426e5f8eec10eb76d138f4cd1d66a9348db09716eb50d0e35f000c7b7b9488ba1b2d3956bf0f27044a2deaa0db2ebfe09bc8ca3cb0d04e
-
SSDEEP
768:kCUNEAvtrDm/uI30lJBkvTeopmkxuYY3k3p/ztt05S:kCUBm/r3+Wvis033kNoS
Malware Config
Signatures
Files
-
a889736390c1115814a208d258bae3c54755dac82293e17c82cca04ba3823dd7.exe windows x86
8ae23c0e23439b8f59a5785b5efd4855
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetLastError
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
SetWindowLongW
MessageBoxW
PostMessageW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
msvcrt
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_vsnwprintf
_initterm
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE