Static task
static1
Behavioral task
behavioral1
Sample
ba2fc34645935b1f226dbb30050cb64e1165f64ed3e095208d22b6ca414fd3a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba2fc34645935b1f226dbb30050cb64e1165f64ed3e095208d22b6ca414fd3a9.exe
Resource
win10v2004-20220812-en
General
-
Target
ba2fc34645935b1f226dbb30050cb64e1165f64ed3e095208d22b6ca414fd3a9
-
Size
14KB
-
MD5
636c65c290bbf71062be80946ce2e845
-
SHA1
8bd67400bde77cf2ada1f635776be7832a5fd2cc
-
SHA256
ba2fc34645935b1f226dbb30050cb64e1165f64ed3e095208d22b6ca414fd3a9
-
SHA512
3b1c49325a23db9372b99d216cb8d1cfdad90bf59433edc4773925cce693afd1c46ec491ec0f81c3dd4139bceb553384d6ec92c059cccb04f9bd22fa36ba1b9e
-
SSDEEP
192:d/+b70VevYIkM1wO+vm7uGQ1emEqqG6cP/MrCVo:d/TV39M6bGhm3RPCCVo
Malware Config
Signatures
Files
-
ba2fc34645935b1f226dbb30050cb64e1165f64ed3e095208d22b6ca414fd3a9.exe windows x86
276dc8ec71b64b4a34c01253dcfa840a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
OpenFile
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThread
DisconnectNamedPipe
VirtualAlloc
QueryPerformanceFrequency
GetSystemTime
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
user32
IsCharUpperA
IsCharLowerA
CharLowerA
GetClipboardViewer
GetClipboardOwner
FindWindowA
shell32
ord155
SHGetFolderLocation
SHGetFileInfoW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yy1 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.888 Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc0 Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ