Static task
static1
Behavioral task
behavioral1
Sample
05d2702d0c2f1f6e71a621357d961cb159029f7946f25c7af020a5c8998125d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05d2702d0c2f1f6e71a621357d961cb159029f7946f25c7af020a5c8998125d3.exe
Resource
win10v2004-20220901-en
General
-
Target
05d2702d0c2f1f6e71a621357d961cb159029f7946f25c7af020a5c8998125d3
-
Size
84KB
-
MD5
9167e56932c399a11ac33556f14eb350
-
SHA1
5e6fb2cbd137a7218fc5874949b4c98df8f85221
-
SHA256
05d2702d0c2f1f6e71a621357d961cb159029f7946f25c7af020a5c8998125d3
-
SHA512
ab656b467a2bc6fd9b74a85812eccd7d8b1163b4cb0fd8a3b2ab54c4ef58085a9a2a082c9e662bb1bb5a270b50cec210b3e6e2e0f24d9e824374cf10b28c5439
-
SSDEEP
1536:BfURSTv5yacgogN2Y0nRTfcC2xleLX5EcW7HCjMNJpl0cy6:aSTQaGNY0Rzcru5ER7D0c
Malware Config
Signatures
Files
-
05d2702d0c2f1f6e71a621357d961cb159029f7946f25c7af020a5c8998125d3.exe windows x86
1a58d902398110219f75afc977793f27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetModuleHandleA
GetProcAddress
VirtualAlloc
SuspendThread
GetTickCount
Sleep
GetLastError
DeleteFileA
RtlUnwind
LoadLibraryA
GetCurrentProcess
HeapReAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
HeapAlloc
HeapFree
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
user32
GetDesktopWindow
SendMessageA
DestroyWindow
ReleaseDC
PostMessageA
LoadIconA
winmm
mixerGetID
auxSetVolume
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ