Static task
static1
Behavioral task
behavioral1
Sample
0d93868f36ebcf25a8270df8b5993245c03be9b599c87596008d4a9066064b95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d93868f36ebcf25a8270df8b5993245c03be9b599c87596008d4a9066064b95.exe
Resource
win10v2004-20220812-en
General
-
Target
0d93868f36ebcf25a8270df8b5993245c03be9b599c87596008d4a9066064b95
-
Size
41KB
-
MD5
647341a22854168e38200ee5a5304600
-
SHA1
83e083a609e06f27a9eb149d5365e486c3725b9c
-
SHA256
0d93868f36ebcf25a8270df8b5993245c03be9b599c87596008d4a9066064b95
-
SHA512
f3885f8c3744de647a3b064d4032c74d587d761d1f9a39e9b7b2205a79e65596bf69256c8f210e5b6823e6b352779ea27aae4938af3f9ff1873fbcd9e62bce39
-
SSDEEP
768:K/mJ4LAe0j1iSUwNv0fgToLapOiRTMalyu1Ky:KBATjnNuEpOiRQaK
Malware Config
Signatures
Files
-
0d93868f36ebcf25a8270df8b5993245c03be9b599c87596008d4a9066064b95.exe windows x86
0a70028c1c8527eb70197d339e8dc4cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetLastError
FreeLibrary
VirtualAlloc
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LoadLibraryW
atl
AtlMarshalPtrInProc
ntdll
NtAddAtom
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE