Static task
static1
Behavioral task
behavioral1
Sample
0e7d9754add83d2d13501b2c6a9cc07d3a06d3c2e3f47e28b5b1313846451023.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e7d9754add83d2d13501b2c6a9cc07d3a06d3c2e3f47e28b5b1313846451023.exe
Resource
win10v2004-20220901-en
General
-
Target
0e7d9754add83d2d13501b2c6a9cc07d3a06d3c2e3f47e28b5b1313846451023
-
Size
597KB
-
MD5
4dd243755bb846d821a03035e8a637e0
-
SHA1
86d74a9b8e339af898cbcf7ab705ac3a44cb97e4
-
SHA256
0e7d9754add83d2d13501b2c6a9cc07d3a06d3c2e3f47e28b5b1313846451023
-
SHA512
4af329bfbdf679f919af66400e551a24f2de326d3488e6d2af65c53f28e1e1ab7180d22b8dbe8e67c3668ef66b9e555dc4c564ec34370da107b855a12e0c6d8f
-
SSDEEP
12288:nD68wVDqE9lfZm9Dg1ZcnUCXlAgHqa61PYyndwc:kqg0Dg1ZcnusqjQynt
Malware Config
Signatures
Files
-
0e7d9754add83d2d13501b2c6a9cc07d3a06d3c2e3f47e28b5b1313846451023.exe windows x64
48ce9b2dd7f36a93121fd689157c57d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
GetTraceEnableFlags
GetTraceLoggerHandle
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
TraceMessage
kernel32
LoadLibraryExW
WideCharToMultiByte
FormatMessageW
lstrlenW
GetLastError
SetLastError
GetProcAddress
LocalFree
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
LoadLibraryW
ReleaseActCtx
DeactivateActCtx
GetModuleFileNameW
ActivateActCtx
CreateActCtxW
RtlCaptureContext
RtlLookupFunctionEntry
QueryPerformanceCounter
user32
DestroyWindow
LoadCursorW
LoadIconW
MessageBoxW
RegisterClassW
DefWindowProcW
CreateWindowExW
msvcrt
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
memset
shell32
CommandLineToArgvW
ole32
CoTaskMemFree
CoFreeLibrary
CoTaskMemAlloc
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 556KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE