Static task
static1
Behavioral task
behavioral1
Sample
5ad9f2a2d26b8c2adc6fb3ffc22c2cfaf0c4bc8b5168eb3e7913d0e2fbe07662.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ad9f2a2d26b8c2adc6fb3ffc22c2cfaf0c4bc8b5168eb3e7913d0e2fbe07662.exe
Resource
win10v2004-20220812-en
General
-
Target
5ad9f2a2d26b8c2adc6fb3ffc22c2cfaf0c4bc8b5168eb3e7913d0e2fbe07662
-
Size
108KB
-
MD5
666fdc79bb078cf16614d9eb96a66b80
-
SHA1
7fe9a01d569b9422cecab0a57eced5bd7f5bca45
-
SHA256
5ad9f2a2d26b8c2adc6fb3ffc22c2cfaf0c4bc8b5168eb3e7913d0e2fbe07662
-
SHA512
e1633e31e85aba7c00dec4ff097ff2654945b419144120ab5f1768b9fd909b8c851fba30a48d7219ab3fa873e394a8ba8d1baad45260fa0ae1a09d48e57531d1
-
SSDEEP
1536:qVpb20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHff:wN20iJ27c1Q50iRyNDZEH
Malware Config
Signatures
Files
-
5ad9f2a2d26b8c2adc6fb3ffc22c2cfaf0c4bc8b5168eb3e7913d0e2fbe07662.exe windows x86
735dec0588ef672e554e945b181829f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent
kernel32
LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ
shell32
CommandLineToArgvW
netprojw
_NetworkProjectionThreadMain@12
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE