Static task
static1
Behavioral task
behavioral1
Sample
b3361750c5baebc1bf4e6af3b28b93db0286b20bd9db2b543b4e729b8b577eb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3361750c5baebc1bf4e6af3b28b93db0286b20bd9db2b543b4e729b8b577eb2.exe
Resource
win10v2004-20220812-en
General
-
Target
b3361750c5baebc1bf4e6af3b28b93db0286b20bd9db2b543b4e729b8b577eb2
-
Size
566KB
-
MD5
92454a92ab85242f551dbd545c854420
-
SHA1
a52feccf700c2e91a9a3460939484d9c60e229d4
-
SHA256
b3361750c5baebc1bf4e6af3b28b93db0286b20bd9db2b543b4e729b8b577eb2
-
SHA512
6270bba8147558f24a63f8f1d5c52c65d5a0a922a28063c244060b8702b0e2c75d59682a572b42b8ca9a4e2509da6e404415af0b5f6da4b0c1dd3b2985c658c3
-
SSDEEP
12288:M05lPX6837rQsY3aXgz0OF85jLd4DMft3uwTr3mAPn5C4ddh:NpXxrMaE1V6so3
Malware Config
Signatures
Files
-
b3361750c5baebc1bf4e6af3b28b93db0286b20bd9db2b543b4e729b8b577eb2.exe windows x64
31faeb4e31da74c4bf5bffa200cd7682
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegGetValueW
kernel32
SearchPathW
CreateProcessW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
RtlCaptureContext
msvcrt
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
memset
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 556KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE