Static task
static1
Behavioral task
behavioral1
Sample
64343ce9714756d4d40802770dc7b2d253b4826f0e610e439b89e2e586ecf193.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64343ce9714756d4d40802770dc7b2d253b4826f0e610e439b89e2e586ecf193.exe
Resource
win10v2004-20220901-en
General
-
Target
64343ce9714756d4d40802770dc7b2d253b4826f0e610e439b89e2e586ecf193
-
Size
589KB
-
MD5
084b7205bd1d70c11086f64aad808790
-
SHA1
6706f73b6b577047bd2e092869629133ec5a758f
-
SHA256
64343ce9714756d4d40802770dc7b2d253b4826f0e610e439b89e2e586ecf193
-
SHA512
08a902f55cfa9471881a0db2ce6f2b7d4ab8c6a2fbaafffcd97a9a62ea826efbc9ddacc7a4861eac0a91f8f44dc6361ee73045ac4a7e1cc6372f54d81362a657
-
SSDEEP
12288:rMf7R8BrJ8Qiw/2s+kWk7vNwymDO6ZtpN1sh9:r27R8BrJ8QiypP7vKD571o
Malware Config
Signatures
Files
-
64343ce9714756d4d40802770dc7b2d253b4826f0e610e439b89e2e586ecf193.exe windows x86
ab97a11f1a35fac580d7ba2691a1b76a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
__CxxFrameHandler
_CxxThrowException
_ultoa
?terminate@@YAXXZ
_onexit
__dllonexit
_controlfp
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
??3@YAXPAX@Z
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
printf
puts
?set_terminate@@YAP6AXXZP6AXXZ@Z
??2@YAPAXI@Z
kernel32
UnhandledExceptionFilter
WriteFile
ConnectNamedPipe
CreateNamedPipeA
DisconnectNamedPipe
SetLastError
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
CreateFileA
SetThreadPriority
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
DeviceIoControl
GetOverlappedResult
WaitForMultipleObjects
OpenProcess
DuplicateHandle
CreateThread
ResumeThread
PulseEvent
GetProcessHeap
HeapAlloc
lstrcpyA
OpenEventA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
GetLastError
lstrlenA
Sleep
CloseHandle
WaitForSingleObject
CreateEventA
ExpandEnvironmentStringsA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
ReadFile
SetUnhandledExceptionFilter
GetModuleHandleA
lstrcmpiA
FormatMessageA
LocalAlloc
LocalFree
MultiByteToWideChar
GetACP
WideCharToMultiByte
lstrlenW
ntdll
strpbrk
_strnicmp
isgraph
sprintf
_itoa
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 496KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE