Static task
static1
Behavioral task
behavioral1
Sample
12ec36b36116c96607115864513a243d5fb5067949879314df5e0c5903b51277.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12ec36b36116c96607115864513a243d5fb5067949879314df5e0c5903b51277.exe
Resource
win10v2004-20220901-en
General
-
Target
12ec36b36116c96607115864513a243d5fb5067949879314df5e0c5903b51277
-
Size
48KB
-
MD5
0be6fd5fe5f4ded16eaf8ae3d262c140
-
SHA1
2f7fabc9a3c9a0bebbb2924142d7090c885e7a1e
-
SHA256
12ec36b36116c96607115864513a243d5fb5067949879314df5e0c5903b51277
-
SHA512
4a413934f6355d2b4b53a9574062bd6989fd24dbc98252fb4aca2af254fa1d7a829d6231d1b33ec39cc21c61ac40fb442a3096bb804920d96f9c80c25eb7bbd4
-
SSDEEP
768:cvp89xZPrMIPzT2dI2yQxG6G9GJcSV2UYmjO0Nk5pLeuo5RCUwGBxUgp:cvp8hDMyT2doQxGJQ5OeOsuTtGBq4
Malware Config
Signatures
Files
-
12ec36b36116c96607115864513a243d5fb5067949879314df5e0c5903b51277.exe windows x86
26e6d7f3b6eeac60bb91c3b2d3b0dae2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharToOemW
LoadStringW
netapi32
NetServerTransportEnum
NetServerEnum
NetServerGetInfo
NetApiBufferFree
kernel32
UnhandledExceptionFilter
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
GetConsoleScreenBufferInfo
CreateFileW
SetThreadUILanguage
GetConsoleOutputCP
HeapSetInformation
FreeLibrary
GetLastError
LoadLibraryW
SetLastError
MultiByteToWideChar
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleW
FormatMessageW
GetACP
GetOEMCP
LocalFree
LocalAlloc
GetCommandLineW
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InterlockedExchange
msvcrt
wcschr
vfwprintf
vswprintf_s
_ultoa
printf
wprintf
wcstoul
wcstol
_wcsnicmp
memmove
_wcslwr
_wcsdup
__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_iob
fwprintf
free
memset
wcscat_s
setlocale
swprintf_s
_wsetlocale
_wcsicmp
wcscpy_s
_wcsupr
malloc
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE