Static task
static1
Behavioral task
behavioral1
Sample
0d7ffd2e14bbff17de8df4049dd01ff27027ef0172dec619404a29b2259d805d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d7ffd2e14bbff17de8df4049dd01ff27027ef0172dec619404a29b2259d805d.exe
Resource
win10v2004-20220812-en
General
-
Target
0d7ffd2e14bbff17de8df4049dd01ff27027ef0172dec619404a29b2259d805d
-
Size
620KB
-
MD5
8461c09ffb09a27c4ce7650bece38680
-
SHA1
e7f8e5dc079923d09632bd3a353a2acd285d0bca
-
SHA256
0d7ffd2e14bbff17de8df4049dd01ff27027ef0172dec619404a29b2259d805d
-
SHA512
78d16048a86be1920eddbb8125083ee6824080d067791bb10feccec093bd87a42646e6d6fef77bd35d624b9252134a49f9e2e8f2949d5b5ff069d19d515225c5
-
SSDEEP
12288:X4jRz9c1zr01FY/zUWHbCFwQC5e2ZdcxPqrXk:QrYk4KFwQC5ZZ6ErX
Malware Config
Signatures
Files
-
0d7ffd2e14bbff17de8df4049dd01ff27027ef0172dec619404a29b2259d805d.exe windows x86
7b7126571ccc695f262ae2ad3ca2d190
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler4_common
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
sysdm.cpl
DisplaySYSDMCPL
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp1 Size: 540KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE