Static task
static1
Behavioral task
behavioral1
Sample
15e8b888c6d0cb8903be849e698bc0998547a880325c8b218965ac4f2a883bba.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
15e8b888c6d0cb8903be849e698bc0998547a880325c8b218965ac4f2a883bba.exe
Resource
win10v2004-20220812-en
General
-
Target
15e8b888c6d0cb8903be849e698bc0998547a880325c8b218965ac4f2a883bba
-
Size
85KB
-
MD5
6473ebe9bb2ea3c54c09a6413611f570
-
SHA1
00463bf678b1dfaf34e15c357d544d6b45a8eca9
-
SHA256
15e8b888c6d0cb8903be849e698bc0998547a880325c8b218965ac4f2a883bba
-
SHA512
fbb843d5f0ffed28abdbd9427ded223dd4d767638ba31133a27213b44de939baf55af82200d4d8e07a61b9896a6486c00edb3d211ae8053c221324e131912c60
-
SSDEEP
1536:MAilR7rJp9O6bHdivCCL1UMd9aH3xI7f0Sg6P6J8lXqouIfC:Viv/NOUHL61JPOEj1yKXqou
Malware Config
Signatures
Files
-
15e8b888c6d0cb8903be849e698bc0998547a880325c8b218965ac4f2a883bba.exe windows x86
d2999f6499a6a4fc8ddaee967e968e4d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetServiceStatus
RegCloseKey
RegOpenKeyExW
RegisterServiceCtrlHandlerW
RegNotifyChangeKeyValue
StartServiceCtrlDispatcherW
RegQueryValueExW
RegEnumKeyExW
SystemFunction036
kernel32
DeleteTimerQueueEx
CloseHandle
Sleep
WaitForMultipleObjects
CreateEventW
HeapSetInformation
WaitForSingleObject
SetEvent
CreateThread
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
RaiseException
GetLastError
CreateTimerQueue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
BindIoCompletionCallback
WriteFile
ReadFile
HeapFree
GetProcessHeap
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
msvcrt
_controlfp
_onexit
_lock
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
__CxxFrameHandler3
_purecall
__dllonexit
_unlock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
malloc
_callnewh
realloc
memmove
memset
??0exception@@QAE@XZ
isdigit
memmove_s
memcpy_s
_wcsicmp
free
memcpy
_except_handler4_common
atl
ord23
ord21
ord16
ord17
ord20
ord32
ws2_32
listen
WSASocketW
setsockopt
WSAStartup
WSACleanup
htons
getsockname
socket
bind
getpeername
WSAIoctl
ntohs
WSAGetLastError
htonl
closesocket
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CLSIDFromString
oleaut32
SysAllocString
SysFreeString
wsock32
ord1141
ord1142
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE