Static task
static1
Behavioral task
behavioral1
Sample
a047b8bf8966072d2d61979f22c41f789690b45b406f7d343f8317711d5a535f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a047b8bf8966072d2d61979f22c41f789690b45b406f7d343f8317711d5a535f.exe
Resource
win10v2004-20220812-en
General
-
Target
a047b8bf8966072d2d61979f22c41f789690b45b406f7d343f8317711d5a535f
-
Size
277KB
-
MD5
811036fa097477f6cc0539f61c805f60
-
SHA1
d0e15b0b4a6b2986c93fa49aa1a941e54769bb48
-
SHA256
a047b8bf8966072d2d61979f22c41f789690b45b406f7d343f8317711d5a535f
-
SHA512
834e25761b2de32dc65238b850e89bb3c003c1a50d639c7765152237efbb85eb82a0085664344e56e348ae7285f76ca3c602093722ff4ca9809527b85255f1ad
-
SSDEEP
6144:RSpRNamAVqOGJJUNeylxxeTam1Memr7v6gCNltsBIYC92DCc:grwmAoJS0ylxxeTRM6nQW92mc
Malware Config
Signatures
Files
-
a047b8bf8966072d2d61979f22c41f789690b45b406f7d343f8317711d5a535f.exe windows x86
f65d9c21b5cab21f49a30a0b812e1a4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetCurrentProcessId
SetLastError
CloseHandle
GetProcessHeap
GetSystemTimeAsFileTime
GetUserDefaultLCID
FindResourceW
CreateFileA
HeapFree
GlobalFindAtomA
lstrlenW
SetUnhandledExceptionFilter
SystemTimeToFileTime
MultiByteToWideChar
lstrcpyW
HeapAlloc
GetCurrentProcess
QueryPerformanceCounter
lstrcmpA
WideCharToMultiByte
GetTickCount
LoadLibraryW
psapi
GetProcessImageFileNameA
GetPerformanceInfo
EmptyWorkingSet
EnumProcessModules
EnumPageFilesA
EnumPageFilesW
olecli32
LeRelease
LeGetUpdateOptions
LeQueryOutOfDate
LeQueryOpen
LeSetBounds
LeSetData
LeObjectConvert
LeReconnect
LeObjectLong
LeSaveToStream
LeQueryBounds
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ