Static task
static1
Behavioral task
behavioral1
Sample
11d4bda16fc427c2d1ea80b938343aabe9a9057b882a65763054e797b13aa369.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
11d4bda16fc427c2d1ea80b938343aabe9a9057b882a65763054e797b13aa369.exe
Resource
win10v2004-20220901-en
General
-
Target
11d4bda16fc427c2d1ea80b938343aabe9a9057b882a65763054e797b13aa369
-
Size
116KB
-
MD5
059dd802b3cb7b061f741e7b44368450
-
SHA1
a83d9aff8f8df06f0394c276c88d2a518be07f92
-
SHA256
11d4bda16fc427c2d1ea80b938343aabe9a9057b882a65763054e797b13aa369
-
SHA512
e98fbb89495d17fca1b7b867d71f4103592601fe29dad395c2b79647b139fda9bc8fb3ff154ca003f90557d885f54412ad6859a55c2caf8b49846b5a90145d01
-
SSDEEP
3072:/T55NOFpTyIcuz9WzF4Chdlzri6aS1xamjXL1:/T5XOyIcAyFD7lzDx1sY
Malware Config
Signatures
Files
-
11d4bda16fc427c2d1ea80b938343aabe9a9057b882a65763054e797b13aa369.exe windows x86
c93fd93bd6bc0a48153291ca3b76a836
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSetInformation
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
IsWindow
msvcrt
__p__fmode
_controlfp
__p__commode
?terminate@@YAXXZ
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wtoi64
__setusermatherr
__set_app_type
_except_handler4_common
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pntjzzf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE