KillDataExW
Static task
static1
Behavioral task
behavioral1
Sample
5fa32210d7d92d07182a34d916d02f72288d25bc6e1e3ca8429d7fc519aa32a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fa32210d7d92d07182a34d916d02f72288d25bc6e1e3ca8429d7fc519aa32a1.exe
Resource
win10v2004-20220812-en
General
-
Target
5fa32210d7d92d07182a34d916d02f72288d25bc6e1e3ca8429d7fc519aa32a1
-
Size
172KB
-
MD5
0ccdb9fe9f1523cfece3f16560b00fd8
-
SHA1
81306a9a70794634716844f17b3dcf2f2bd7321b
-
SHA256
5fa32210d7d92d07182a34d916d02f72288d25bc6e1e3ca8429d7fc519aa32a1
-
SHA512
0971249822b78b06e5f600475ac107e7d7ff1b3312a01830620060ef348b69c9cda78027dbe3da6b668b5cc5295f10e4eacc8558f8daad7e5b74179495458963
-
SSDEEP
3072:pE9TDaRnbCPPb/bHm7oGnvLQn2XHS40APdc+/8UCZDTwb20U:pEdGnbCPPj+nvLXS4jd8UCdbR
Malware Config
Signatures
Files
-
5fa32210d7d92d07182a34d916d02f72288d25bc6e1e3ca8429d7fc519aa32a1.exe windows x86
603734f9282b8f746754e6efb2621187
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rtutils
LogEventW
psapi
GetModuleFileNameExW
kernel32
GlobalHandle
lstrcmpA
TransactNamedPipe
IsValidLanguageGroup
RtlUnwind
GetFileAttributesExW
SystemTimeToFileTime
CreateEventA
GetPriorityClass
CreateFileA
DeleteCriticalSection
GetFullPathNameW
HeapUnlock
FindClose
lstrlenA
LocalFree
lstrlenW
SetFileApisToOEM
GetCPInfo
SetFileTime
SetMailslotInfo
GetSystemInfo
VerSetConditionMask
OpenSemaphoreW
FindResourceExA
CreateMailslotW
GetSystemWindowsDirectoryW
GetComputerNameA
TlsSetValue
lstrcmpW
ReadFile
GetCurrentThread
LoadResource
GetTempPathW
GetTimeFormatW
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.On59 Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Zek Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Eh0887 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Nus Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Re82 Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Sty Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Racy Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Cru Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Lax503 Size: 512B - Virtual size: 362B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Tup Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ