Static task
static1
Behavioral task
behavioral1
Sample
2953830e19e9ce82c58fdc537e907e212bc875f67f59ab19c361614df5c2a41e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2953830e19e9ce82c58fdc537e907e212bc875f67f59ab19c361614df5c2a41e.exe
Resource
win10v2004-20220812-en
General
-
Target
2953830e19e9ce82c58fdc537e907e212bc875f67f59ab19c361614df5c2a41e
-
Size
36KB
-
MD5
7041dc6d05efcccb58c95dd0b56fa450
-
SHA1
e3d2e5a0638d83213978679eca512188c28bfef2
-
SHA256
2953830e19e9ce82c58fdc537e907e212bc875f67f59ab19c361614df5c2a41e
-
SHA512
eab6c0b9d9de05689a843084751f7aa30129981650aaa6355d012ac0b1c1b972e6a9b6b762d34e6d9d14b77f73cac4d8e425d63d88f1df6acdef48758dff76cf
-
SSDEEP
768:aJUpWsODScktDFjbDsP6JW67AylA+v8pv:a2VODScqFjbDsP6JWqG+Ep
Malware Config
Signatures
Files
-
2953830e19e9ce82c58fdc537e907e212bc875f67f59ab19c361614df5c2a41e.exe windows x86
6520fc45a6d55f0dd542fdd30097ee44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
api-ms-win-service-core-l1-1-0
StartServiceCtrlDispatcherW
SetServiceStatus
api-ms-win-service-winsvc-l1-1-0
RegisterServiceCtrlHandlerW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-interlocked-l1-1-0
InterlockedCompareExchange
InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0
GetModuleHandleA
api-ms-win-core-misc-l1-1-0
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0
CreateEventW
SetEvent
WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppdrfyu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE