Static task
static1
Behavioral task
behavioral1
Sample
92cca2c6a66760f0a075dddb27a7c234baaaf8de61f4f8a945d4f614c1f83ed4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92cca2c6a66760f0a075dddb27a7c234baaaf8de61f4f8a945d4f614c1f83ed4.exe
Resource
win10v2004-20220812-en
General
-
Target
92cca2c6a66760f0a075dddb27a7c234baaaf8de61f4f8a945d4f614c1f83ed4
-
Size
31KB
-
MD5
4b6a4433ae608d79d0ecb7c343f41bf0
-
SHA1
d2f6bd2ef73ffff909a549a207be7dd393e32fee
-
SHA256
92cca2c6a66760f0a075dddb27a7c234baaaf8de61f4f8a945d4f614c1f83ed4
-
SHA512
4741ab7d13a0a6fb42e4eec016979cf14a5e1d43e96102d697960ffc9f3eff908866edd3f4d7675574743ab4fa134442e7feddd812820161082d74f947589362
-
SSDEEP
768:767fWKMGje43zzpBif+rMsBNPZzmJR6srLKzPHBIU:7u7KcvjiAMScJRZrLKzPHB
Malware Config
Signatures
Files
-
92cca2c6a66760f0a075dddb27a7c234baaaf8de61f4f8a945d4f614c1f83ed4.exe windows x86
9420ebcb3df4a10fe54b20a468e139c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
kernel32
CloseHandle
GetLastError
CreateEventW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
_cexit
??1type_info@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_controlfp
memset
__set_app_type
__CxxFrameHandler3
swprintf_s
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
__getmainargs
malloc
_callnewh
_CxxThrowException
free
??0exception@@QAE@ABV0@@Z
ole32
CoSetProxyBlanket
CoCreateInstance
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CoInitialize
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE