Static task
static1
Behavioral task
behavioral1
Sample
310d935966f86e69e674443bc1fdb8d0a3df5883204acb7f72296bd9287fc25f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
310d935966f86e69e674443bc1fdb8d0a3df5883204acb7f72296bd9287fc25f.exe
Resource
win10v2004-20220812-en
General
-
Target
310d935966f86e69e674443bc1fdb8d0a3df5883204acb7f72296bd9287fc25f
-
Size
39KB
-
MD5
4199630b15df441f8235ecf8cd58df70
-
SHA1
d4f6acc1077722fd4bdbbf2d7c2474ed60496554
-
SHA256
310d935966f86e69e674443bc1fdb8d0a3df5883204acb7f72296bd9287fc25f
-
SHA512
3d44ca5bb22b9caa21e7625bacfec716df48b96eae5817341b6392a2d2b5976d24ab7ba831be44e69b86d6922d174e9d64bc87b86273d4704e36fd56ddcd00aa
-
SSDEEP
768:Vt4GIt8u+57oVPhHYDHriTbzWHWKZiO2MdoFVaNieCD8JjlCMyVupMqhmRNrV3KC:P4Gq9QmPhHYf7HWKZoUoFYies85lCMpl
Malware Config
Signatures
Files
-
310d935966f86e69e674443bc1fdb8d0a3df5883204acb7f72296bd9287fc25f.exe windows x86
ae5ea4ac4aea9fb38cffd7a7b46a99ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
__p__commode
_XcptFilter
??2@YAPAXI@Z
_vsnwprintf
??3@YAXPAX@Z
memset
setupapi
InstallHinfSectionW
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegOpenKeyW
TraceMessage
CloseServiceHandle
kernel32
LoadLibraryW
GetWindowsDirectoryW
GetLastError
GetModuleHandleExA
DeleteFileW
FreeLibrary
VerifyVersionInfoW
VerSetConditionMask
TerminateProcess
GetCurrentProcess
GetTempPathW
GetTempFileNameW
GetProcAddress
SetUnhandledExceptionFilter
Sleep
UnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrprmst Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE