Static task
static1
Behavioral task
behavioral1
Sample
f18cbcc92a44216fc68c7f6973a12649b131a39e17c30b9535d6ec767f29b35d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f18cbcc92a44216fc68c7f6973a12649b131a39e17c30b9535d6ec767f29b35d.exe
Resource
win10v2004-20220812-en
General
-
Target
f18cbcc92a44216fc68c7f6973a12649b131a39e17c30b9535d6ec767f29b35d
-
Size
277KB
-
MD5
05633840b5ba3e365e47477e96d06910
-
SHA1
c4145aef13df848659a7364f985a198a692cc63d
-
SHA256
f18cbcc92a44216fc68c7f6973a12649b131a39e17c30b9535d6ec767f29b35d
-
SHA512
518bb962a40ec8ad5358c79536cd67216a3d4adc8a6ad6bd31b70300b35bfd2fb280eebdbee5d819e56c9d45ccd0eea0336899fecccf3ee0564a82d75b687c84
-
SSDEEP
6144:+mOocV1SeVBLbzTxQ+YLTD6Y1R64SA/wcCyuRCJMS71J/eGCRPQMCc:5eV1SuBLbzTK+Ynm6zSAlduRCJv19e1B
Malware Config
Signatures
Files
-
f18cbcc92a44216fc68c7f6973a12649b131a39e17c30b9535d6ec767f29b35d.exe windows x86
5378c8c75ebaf4a3f6b56c72bd3c92c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
LoadLibraryW
GetCurrentProcessId
SystemTimeToFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetProcessHeap
HeapAlloc
CreateFileA
GetLocalTime
GetCPInfo
OutputDebugStringA
SetLastError
WideCharToMultiByte
CloseHandle
lstrlenW
lstrcmpA
HeapFree
GetCurrentProcess
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
MultiByteToWideChar
FindResourceW
GetACP
olecli32
LeReconnect
LeSaveToStream
LeQueryBounds
LeQueryProtocol
LeQueryOpen
LeGetUpdateOptions
LeQueryType
LeObjectConvert
LeSetBounds
LeSetData
LeQueryOutOfDate
LeObjectLong
LeRelease
printui
vPrinterPropPages
vServerPropPages
vDocumentDefaults
vQueueCreate
ConstructPrinterFriendlyName
psapi
EnumPageFilesW
EnumProcessModules
EmptyWorkingSet
EnumPageFilesA
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ