Static task
static1
Behavioral task
behavioral1
Sample
20ca5046149394294828e733dbfea9c39da606b1d7a0f10f4ca75354c14bd2d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20ca5046149394294828e733dbfea9c39da606b1d7a0f10f4ca75354c14bd2d2.exe
Resource
win10v2004-20220812-en
General
-
Target
20ca5046149394294828e733dbfea9c39da606b1d7a0f10f4ca75354c14bd2d2
-
Size
72KB
-
MD5
0c85a9b74eef00350b6fe632fe606ce0
-
SHA1
db7c1ac94ca65e2412b556ea29cf0eb58e38d96e
-
SHA256
20ca5046149394294828e733dbfea9c39da606b1d7a0f10f4ca75354c14bd2d2
-
SHA512
0c4c2cb25d016bdf1d16eed33ebf330067906a31bfc00f4b721246ba1d2efc875d553d2fe29a04db5f315223246018749fdb93339635ea13bccd50198b24bafb
-
SSDEEP
768:BUNECv9m/uI30lJBkvTev028UKhuQxMWZq0dxHvMyo95ajOTYi2JOGmxFYTALb:BUrm/r3+WviSUKHCWZpfIYjOb2JR2KA
Malware Config
Signatures
Files
-
20ca5046149394294828e733dbfea9c39da606b1d7a0f10f4ca75354c14bd2d2.exe windows x86
8ae23c0e23439b8f59a5785b5efd4855
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetLastError
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
SetWindowLongW
MessageBoxW
PostMessageW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
msvcrt
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_vsnwprintf
_initterm
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmvgycu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE