Static task
static1
Behavioral task
behavioral1
Sample
1d2a763a714ccd822d16803b98e9e0d7c26f057be2821ac182266e1c6f714b69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d2a763a714ccd822d16803b98e9e0d7c26f057be2821ac182266e1c6f714b69.exe
Resource
win10v2004-20220812-en
General
-
Target
1d2a763a714ccd822d16803b98e9e0d7c26f057be2821ac182266e1c6f714b69
-
Size
282KB
-
MD5
92ca6c4547675cb0d3bc90967fa3a590
-
SHA1
36845ba6c75bd9a66152cbe2a96bc7eeb0561d08
-
SHA256
1d2a763a714ccd822d16803b98e9e0d7c26f057be2821ac182266e1c6f714b69
-
SHA512
09e45ddabdba79254eea7b613bedf91f6a5499b6383b22ba61c7b4614ff454898184fc7568bd139009391576cdc373fdfe2964233d833b7e250803b2c1649e36
-
SSDEEP
6144:VIqzGwH82Qp/0WWSXWbAD/EJmuNgTq/1o4wv2p1Y1rAr:V7zGwslVXW4EsNCxhM1cr
Malware Config
Signatures
Files
-
1d2a763a714ccd822d16803b98e9e0d7c26f057be2821ac182266e1c6f714b69.exe windows x86
c5b32f75a2315964bf6f38d83f203ed0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetCurrentProcess
SystemTimeToFileTime
GetCurrentProcessId
GetUserDefaultLCID
GetProcessHeap
SetLastError
lstrlenW
CloseHandle
SetUnhandledExceptionFilter
GlobalFindAtomA
HeapAlloc
QueryPerformanceCounter
lstrcmpA
HeapFree
FindResourceW
WideCharToMultiByte
GlobalAlloc
GetSystemTimeAsFileTime
GetLocalTime
lstrcpyW
MultiByteToWideChar
CreateFileA
GetTickCount
psapi
EnumProcessModules
EnumPageFilesW
EnumPageFilesA
GetPerformanceInfo
GetProcessImageFileNameA
EmptyWorkingSet
olecli32
LeReconnect
LeObjectLong
LeRelease
LeSaveToStream
LeQueryOpen
LeObjectConvert
LeGetUpdateOptions
LeSetBounds
LeSetData
LeQueryOutOfDate
LeQueryBounds
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ