img_process
Static task
static1
Behavioral task
behavioral1
Sample
43313ed8c813f7bc2a23c36a92eb450e8b90bbd411e5f1e10c33c92dda7edd61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43313ed8c813f7bc2a23c36a92eb450e8b90bbd411e5f1e10c33c92dda7edd61.exe
Resource
win10v2004-20220812-en
General
-
Target
43313ed8c813f7bc2a23c36a92eb450e8b90bbd411e5f1e10c33c92dda7edd61
-
Size
353KB
-
MD5
ec9153299de6b460a3aab9860c3be3b4
-
SHA1
4ff2be3e30f796c6a8dde82d23b4aea26d8b2bb6
-
SHA256
43313ed8c813f7bc2a23c36a92eb450e8b90bbd411e5f1e10c33c92dda7edd61
-
SHA512
1a9e3e44cb6e6834698d2cee2c4c716ad91ab4576f82123b279d9ef14a647f14890df2e8c0a5ccb869c271240263f84cca6f7d42bbbc07993a1da3abe69c4559
-
SSDEEP
6144:2sNo0sfSqlev2MdcMg3ZhM7f/wYjnNeG66ljiZN3YQQrTuOM8rsrF+0hST04m6Yj:2sNo0sfSp+Mdcf3ZhM7f/wYDNeG66ljr
Malware Config
Signatures
Files
-
43313ed8c813f7bc2a23c36a92eb450e8b90bbd411e5f1e10c33c92dda7edd61.exe windows x86
b0d3a43b6f6df245bdf8131a7367655f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc140
ord5096
ord1044
ord310
ord1509
kernel32
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetCurrentThreadId
GetCurrentProcessId
OpenFileMappingA
MapViewOfFile
SetPriorityClass
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceA
UnmapViewOfFile
VirtualFree
VirtualAlloc
VirtualProtect
GetModuleHandleA
LoadLibraryA
GetProcAddress
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
CreateEventW
IsDebuggerPresent
QueryPerformanceCounter
shlwapi
PathFileExistsA
vcruntime140
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__CxxFrameHandler3
__std_terminate
memmove
memset
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_initialize_narrow_environment
_seh_filter_exe
_set_app_type
_crt_atexit
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
terminate
_controlfp_s
_cexit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ