Static task
static1
Behavioral task
behavioral1
Sample
2b0519ad0a34e104ab0e7b75505eb5f64c0e5de098205688d451ca735657b57a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b0519ad0a34e104ab0e7b75505eb5f64c0e5de098205688d451ca735657b57a.exe
Resource
win10v2004-20220812-en
General
-
Target
2b0519ad0a34e104ab0e7b75505eb5f64c0e5de098205688d451ca735657b57a
-
Size
207KB
-
MD5
66b6a2b44069443bd2e1bf68c2228dc0
-
SHA1
26c0d92a600a90b82214d8022a6ee5f9fc0c5a39
-
SHA256
2b0519ad0a34e104ab0e7b75505eb5f64c0e5de098205688d451ca735657b57a
-
SHA512
ee6211c147f7596c1004998a10e900789b7ac29b146cd0810fa027f5abc6fe6f115aa4f2e83d5a40c32a8310054a97d93873dfceb138013b7b4ffa126e3dc6e7
-
SSDEEP
6144:TKEEneQVM1ZJFugHIttZzqupHmx+eWvGB8cjZZ1hHKE:LaFVMPug0B591/qRLv
Malware Config
Signatures
Files
-
2b0519ad0a34e104ab0e7b75505eb5f64c0e5de098205688d451ca735657b57a.exe windows x86
a8ad2c20946038e2472ab4f637967113
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAppendSecurityProfileInfo
SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable
SceAddToNameStatusList
kernel32
GetProcessHeap
WideCharToMultiByte
SystemTimeToFileTime
MultiByteToWideChar
lstrcpyW
GetLocaleInfoA
GetOEMCP
SetLastError
FindResourceW
CloseHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
lstrlenW
HeapFree
SetUnhandledExceptionFilter
LoadLibraryW
lstrcmpA
CreateFileA
GetTickCount
GetCurrentProcess
GetLocalTime
GetCurrentProcessId
HeapAlloc
wiadss
CloseFindContext
FindFirstImportDS
FindImportDSByDeviceName
LoadImportDS
GetLoaderStatus
UnloadImportDS
FindNextImportDS
wiashext
AddDeviceWasChosenW
AddDeviceWasChosen
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ