Static task
static1
Behavioral task
behavioral1
Sample
8199c580821165de83e1796978a6113820fb5a40c4b8529c4dc7a87d05b63271.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8199c580821165de83e1796978a6113820fb5a40c4b8529c4dc7a87d05b63271.exe
Resource
win10v2004-20220812-en
General
-
Target
8199c580821165de83e1796978a6113820fb5a40c4b8529c4dc7a87d05b63271
-
Size
410KB
-
MD5
651137ca31001c9e673028f2f98c8400
-
SHA1
4ad0c69c2a07916af700a0def78e2f805695dae6
-
SHA256
8199c580821165de83e1796978a6113820fb5a40c4b8529c4dc7a87d05b63271
-
SHA512
dc8c891db7e90996b4733566264f9e9a88ed881cb236ef7ef66ec88d3c24152412ded4d5c2c7a2a9f6ea07176a47929537e9fe24b4d0fee78d7bf22a117c9265
-
SSDEEP
6144:DTW3yb7JvqlUeTLXjfBJ7NxYa4qeZUqlHHmcvXSbGqgSbGqnSbGq:Dqi3Jva1zfNxtBeZUqlNvXS6SVS
Malware Config
Signatures
Files
-
8199c580821165de83e1796978a6113820fb5a40c4b8529c4dc7a87d05b63271.exe windows x86
66476c3762d0ef81762f6b6a7b9d8878
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
CloseHandle
CompareStringW
CreateFileMappingW
CreateFileW
FoldStringW
GetCurrentProcess
GetCurrentThreadId
GetDateFormatW
GetFileInformationByHandle
GetLocalTime
GetLocaleInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
GetStartupInfoA
GetUserDefaultLCID
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalUnlock
QueryPerformanceCounter
ReadFile
SetUnhandledExceptionFilter
TerminateProcess
lstrcmpiW
lstrcpyW
lstrlenW
GetTimeFormatW
CreateFileA
user32
LoadCursorW
LoadCursorA
LoadIconA
advapi32
RegOpenKeyW
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ