Static task
static1
Behavioral task
behavioral1
Sample
de09e0f563724e789bad67a497c4d2230432def07da25a0db168891c5ce5e1a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de09e0f563724e789bad67a497c4d2230432def07da25a0db168891c5ce5e1a8.exe
Resource
win10v2004-20220812-en
General
-
Target
de09e0f563724e789bad67a497c4d2230432def07da25a0db168891c5ce5e1a8
-
Size
280KB
-
MD5
824d870ec4bce9f6e0472829fc212ee0
-
SHA1
8eada0e9c7ba2f7aacb6d88aa523354ade31ad64
-
SHA256
de09e0f563724e789bad67a497c4d2230432def07da25a0db168891c5ce5e1a8
-
SHA512
a116d69c056ce23c44fa12cdf0a7404ecbbdc1bfd1d013a12d938ba67f9ea0bab0ae496b9ce0dcaa3d7ae1649b3cf2cf60b3a7ee298b4e565f8c8a1b38f5ca6b
-
SSDEEP
6144:6C7vrwUoJtX1iS8zYJyngwr4qIQv908urcu:ZwUAgh0AnuVg5uwu
Malware Config
Signatures
Files
-
de09e0f563724e789bad67a497c4d2230432def07da25a0db168891c5ce5e1a8.exe windows x86
91f1becacc65f9e6b5c2b72facab95b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetTickCount
MultiByteToWideChar
HeapFree
SystemTimeToFileTime
lstrlenW
SetLastError
QueryPerformanceCounter
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
CloseHandle
GetCurrentProcess
LoadLibraryW
GetLocalTime
WideCharToMultiByte
FindResourceW
CreateFileA
GetCurrentProcessId
GlobalFindAtomA
lstrcmpA
lstrcpyW
olecli32
LeObjectConvert
LeQueryOpen
LeRelease
LeQueryBounds
LeGetUpdateOptions
LeReconnect
LeSetData
LeObjectLong
LeSaveToStream
LeSetBounds
LeQueryOutOfDate
psapi
EnumPageFilesW
EmptyWorkingSet
GetPerformanceInfo
EnumProcessModules
EnumPageFilesA
GetProcessImageFileNameA
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ