Static task
static1
Behavioral task
behavioral1
Sample
654ca8dfe534a6c23367ac9e4e35da95204e5442cfbb358a6197f9112e1b067b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
654ca8dfe534a6c23367ac9e4e35da95204e5442cfbb358a6197f9112e1b067b.exe
Resource
win10v2004-20220812-en
General
-
Target
654ca8dfe534a6c23367ac9e4e35da95204e5442cfbb358a6197f9112e1b067b
-
Size
114KB
-
MD5
049e50ab1e04bc0be2cfecd35a7ff650
-
SHA1
87180e8951a6a1ab6399940e22c42fa0aa29b76f
-
SHA256
654ca8dfe534a6c23367ac9e4e35da95204e5442cfbb358a6197f9112e1b067b
-
SHA512
26dea2022e272c46f9d09acb07e0545e024f0495d9014d66f6c1abfd20f32e818e12cc0e24a78e9cf023758e9f3227043cf362dfe453bdf7b14e01ada2bebe1a
-
SSDEEP
1536:5V8b20B0ZpdLB2aio1Dxnd+505DQ2mU0IexuPCmnZEHEF/+ERdKtz3H:fy20iJ27c1Q50iRyNDZEHE9RwD
Malware Config
Signatures
Files
-
654ca8dfe534a6c23367ac9e4e35da95204e5442cfbb358a6197f9112e1b067b.exe windows x86
735dec0588ef672e554e945b181829f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceEvent
kernel32
LocalFree
CompareStringW
GetCommandLineW
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset
?terminate@@YAXXZ
shell32
CommandLineToArgvW
netprojw
_NetworkProjectionThreadMain@12
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE