Static task
static1
Behavioral task
behavioral1
Sample
b0f2f00e54468172d8b538ade4cf59d7cae72d40fdfdb72622ff80150fd04513.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0f2f00e54468172d8b538ade4cf59d7cae72d40fdfdb72622ff80150fd04513.exe
Resource
win10v2004-20220812-en
General
-
Target
b0f2f00e54468172d8b538ade4cf59d7cae72d40fdfdb72622ff80150fd04513
-
Size
137KB
-
MD5
0aabbfeebf815115284eb4ca1d0ceec0
-
SHA1
e578cf1275b93f575035a632e101ce06cfbc57c4
-
SHA256
b0f2f00e54468172d8b538ade4cf59d7cae72d40fdfdb72622ff80150fd04513
-
SHA512
72e0916757c38749c28d00e03053d255314c01acdec2d15694b62d4ae003e31abc217c47a3b70969b513f31909a0cd3ffcb96b74f31bb156e05915b06f0a642b
-
SSDEEP
3072:+cqe7Sp5+1k12b/Af885RK6Hzt4mIP9/:+cL7+5+1kf15tzt4
Malware Config
Signatures
Files
-
b0f2f00e54468172d8b538ade4cf59d7cae72d40fdfdb72622ff80150fd04513.exe windows x86
2c3ea4f45ecc29a10d4a6b07d399cda8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumValueW
RegOpenKeyExW
RegCloseKey
kernel32
HeapSetInformation
ExpandEnvironmentStringsW
lstrlenW
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
AllowSetForegroundWindow
msvcrt
_controlfp
_vsnwprintf
memset
__getmainargs
_cexit
_exit
_except_handler4_common
__p__commode
?terminate@@YAXXZ
__set_app_type
__p__fmode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoGetMalloc
CoTaskMemFree
shell32
ShellExecuteExW
shlwapi
ord158
ord437
StrTrimW
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fuiwkik Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE