Static task
static1
Behavioral task
behavioral1
Sample
05f12b11e1c5f40c86106fb2c3ec813140f3f963c895a109bd831eafcf7374c1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05f12b11e1c5f40c86106fb2c3ec813140f3f963c895a109bd831eafcf7374c1.exe
Resource
win10v2004-20220812-en
General
-
Target
05f12b11e1c5f40c86106fb2c3ec813140f3f963c895a109bd831eafcf7374c1
-
Size
214KB
-
MD5
2df01d8373b25777c0c9964330f1fc50
-
SHA1
9158cbcf8eba9f28c87722ca6f05a38e08dca0b5
-
SHA256
05f12b11e1c5f40c86106fb2c3ec813140f3f963c895a109bd831eafcf7374c1
-
SHA512
cbb5ab23bb41f2d4d8c70dd9618a8e0e8318e8466d4a1fd2cf879fa618b7a9073f865c227338eec90cd6b67dcc557fde978d4cd6409eb8017bd8475084089455
-
SSDEEP
3072:cNk4UE8D/X3TGwNAJ0j3OYFyQTx5Oi1UmASIC0IDzz+r4Lkj3QI/7yA6C:tHjKwO6Oc15Oi1UmASIuzKeA6
Malware Config
Signatures
Files
-
05f12b11e1c5f40c86106fb2c3ec813140f3f963c895a109bd831eafcf7374c1.exe windows x86
a6f527b4d05e15b51c5063e8074768ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcsstr
wcschr
fclose
__setusermatherr
swprintf
wcslen
wcscmp
_XcptFilter
_initterm
_wchmod
exit
__winitenv
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_iob
wcstok
malloc
realloc
_c_exit
_cexit
__wgetmainargs
_exit
_wfopen
calloc
wcstod
wcstol
wcsncmp
_wcsnicmp
fflush
fprintf
strtok
wcsncat
_ltow
_itow
wcscpy
free
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegConnectRegistryW
kernel32
SetConsoleMode
WriteConsoleW
ReadFile
ReadConsoleW
MultiByteToWideChar
LocalFree
GetProcAddress
FreeLibrary
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
FileTimeToSystemTime
lstrcpynW
GetConsoleMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
FormatMessageW
WritePrivateProfileSectionW
GetLastError
lstrcatW
SetLastError
GetStdHandle
lstrcmpW
GetComputerNameExW
GetTimeFormatW
GetModuleHandleA
lstrlenW
GetPrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileStringW
lstrcmpiW
lstrcpyW
user32
LoadStringW
wsprintfW
CharLowerW
CharUpperW
mpr
WNetCancelConnection2W
WNetAddConnection2W
WNetGetLastErrorW
netapi32
NetApiBufferFree
NetServerGetInfo
ws2_32
WSAStartup
WSAGetLastError
inet_addr
gethostbyaddr
WSACleanup
secur32
GetUserNameExW
shlwapi
StrCmpNW
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE