Static task
static1
Behavioral task
behavioral1
Sample
5c064973dae9de59c9081a234ad95e9fc1f86ea90a735fb57684265c6533c706.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c064973dae9de59c9081a234ad95e9fc1f86ea90a735fb57684265c6533c706.exe
Resource
win10v2004-20220812-en
General
-
Target
5c064973dae9de59c9081a234ad95e9fc1f86ea90a735fb57684265c6533c706
-
Size
42KB
-
MD5
0841ac9ca789fd898dfe4af43ae73029
-
SHA1
a53d017fb3a9f0737114c3742acc1ab367d99456
-
SHA256
5c064973dae9de59c9081a234ad95e9fc1f86ea90a735fb57684265c6533c706
-
SHA512
031eeee143509853a77ca8f9a24ef3dadbc444bd1876ef31dabce653c2f076277d3c8dff8351b936fd8b708a4eb2e3df261c420d46715a826ce37efbdf4e6c51
-
SSDEEP
768:B52KKvXAXMY31KY3kKNtTCEg1L8C3fDQxG62d2GKWEpT:BnAQJ0KNBbAL8YDQx7/p
Malware Config
Signatures
Files
-
5c064973dae9de59c9081a234ad95e9fc1f86ea90a735fb57684265c6533c706.exe windows x86
99d13af39772c941fe737a6d21b77a26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
kernel32
ExpandEnvironmentStringsA
FreeLibrary
GetProcAddress
LoadLibraryA
SetProcessDEPPolicy
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
UnhandledExceptionFilter
InterlockedExchange
msvcrt
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__fmode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
_vsnprintf
__p__commode
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE