Static task
static1
Behavioral task
behavioral1
Sample
19ca76eaa7a5bbad9a839c9dc23a64da685e8dfd0a0214b5c04ca6486d5a72ee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19ca76eaa7a5bbad9a839c9dc23a64da685e8dfd0a0214b5c04ca6486d5a72ee.exe
Resource
win10v2004-20220812-en
General
-
Target
19ca76eaa7a5bbad9a839c9dc23a64da685e8dfd0a0214b5c04ca6486d5a72ee
-
Size
277KB
-
MD5
309552b21b1802223114266a7e76da32
-
SHA1
76c0449a72fb204643b12b811d3be8b8f5db5192
-
SHA256
19ca76eaa7a5bbad9a839c9dc23a64da685e8dfd0a0214b5c04ca6486d5a72ee
-
SHA512
fb38bcc01ed37aafb19f57a6090571d8d6cdafdf0ed747da70325c485a2f736c56de9271d8bad7235262295eb7fe566a54cf4ac39c673766580ea23ea11f8464
-
SSDEEP
6144:RSpRNamAVqOGJJUNeylxxeTam1Memr7v6gCNltsBIYC92DC3:grwmAoJS0ylxxeTRM6nQW92m3
Malware Config
Signatures
Files
-
19ca76eaa7a5bbad9a839c9dc23a64da685e8dfd0a0214b5c04ca6486d5a72ee.exe windows x86
f65d9c21b5cab21f49a30a0b812e1a4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetCurrentProcessId
SetLastError
CloseHandle
GetProcessHeap
GetSystemTimeAsFileTime
GetUserDefaultLCID
FindResourceW
CreateFileA
HeapFree
GlobalFindAtomA
lstrlenW
SetUnhandledExceptionFilter
SystemTimeToFileTime
MultiByteToWideChar
lstrcpyW
HeapAlloc
GetCurrentProcess
QueryPerformanceCounter
lstrcmpA
WideCharToMultiByte
GetTickCount
LoadLibraryW
psapi
GetProcessImageFileNameA
GetPerformanceInfo
EmptyWorkingSet
EnumProcessModules
EnumPageFilesA
EnumPageFilesW
olecli32
LeRelease
LeGetUpdateOptions
LeQueryOutOfDate
LeQueryOpen
LeSetBounds
LeSetData
LeObjectConvert
LeReconnect
LeObjectLong
LeSaveToStream
LeQueryBounds
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ