Static task
static1
Behavioral task
behavioral1
Sample
a67d6c32742b3937c9237479a88a3247a1b6b70172832d5cf3fdbb1525782032.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a67d6c32742b3937c9237479a88a3247a1b6b70172832d5cf3fdbb1525782032.exe
Resource
win10v2004-20220901-en
General
-
Target
a67d6c32742b3937c9237479a88a3247a1b6b70172832d5cf3fdbb1525782032
-
Size
36KB
-
MD5
0eddedccc322a06b4ae8113d1aaa0860
-
SHA1
e17b13f770eb005af5e62644f9a41579fbb61f6b
-
SHA256
a67d6c32742b3937c9237479a88a3247a1b6b70172832d5cf3fdbb1525782032
-
SHA512
d8def2d04d9020c4c2553e4def11909d60141e9e678146016c577c5fd5a057d26393e5dbbc8874c410578f1435961c4d1a66846c8ead85fd6671af9b9a34a755
-
SSDEEP
384:gcV6VCYWFbxW6eHniHRGlR83kM9+3lOkCTevb1HXwTJ4MLhjW3/yqgn2Aq0gj2Bz:nECv4CHRrUV3gkmejGTJzovy9GjE27a
Malware Config
Signatures
Files
-
a67d6c32742b3937c9237479a88a3247a1b6b70172832d5cf3fdbb1525782032.exe windows x86
5f0a2ad930983255a033ddabe2ac0a4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
msvcrt
__p__fmode
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_controlfp
shell32
ShellExecuteA
shlwapi
PathAppendA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
opxlubn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE