Static task
static1
Behavioral task
behavioral1
Sample
d0ec6edcb261e5b4bf328542580ce99a9bc7eca3cc819d40b634bfe046f0ad24.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d0ec6edcb261e5b4bf328542580ce99a9bc7eca3cc819d40b634bfe046f0ad24.exe
Resource
win10v2004-20220812-en
General
-
Target
d0ec6edcb261e5b4bf328542580ce99a9bc7eca3cc819d40b634bfe046f0ad24
-
Size
88KB
-
MD5
22592986d9b9cea18d44821aea733090
-
SHA1
dffdb6fc33e5386ee915fe733b4011269603d9ee
-
SHA256
d0ec6edcb261e5b4bf328542580ce99a9bc7eca3cc819d40b634bfe046f0ad24
-
SHA512
25cb9b13d672a1acde998bec1a068a0a7cfad9200e2527cd35a4e1bbce370bb9de103444e1c4fe12e17c5c36b0d63fa2fb79a39de76479bc26ce1976d11bfb49
-
SSDEEP
1536:+1dlNoz6zfVP4sEDSQgUfxKd3LQnQMWiiOZ/OuVl3qq28t:+hyzkfGSMfYhg6xg//6qF
Malware Config
Signatures
Files
-
d0ec6edcb261e5b4bf328542580ce99a9bc7eca3cc819d40b634bfe046f0ad24.exe windows x86
5d98e5cd9e8a35f97ad55f3f9bf03038
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
kernel32
GetSystemTimeAsFileTime
Sleep
ExitProcess
CreateFileA
GetNativeSystemInfo
FormatMessageW
IsProcessorFeaturePresent
GetLocalTime
LocalAlloc
GetFileType
GetModuleFileNameA
SwitchToThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
user32
RegisterClassExW
msvcr90
_adjust_fdiv
__setusermatherr
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcscpy
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ