Static task
static1
Behavioral task
behavioral1
Sample
500c77db41feb6fb947c685abb946461a48a05e7956949d03598574b396adfb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
500c77db41feb6fb947c685abb946461a48a05e7956949d03598574b396adfb2.exe
Resource
win10v2004-20220812-en
General
-
Target
500c77db41feb6fb947c685abb946461a48a05e7956949d03598574b396adfb2
-
Size
371KB
-
MD5
0c61c86c389b702743c39562080b2860
-
SHA1
f1f36ed3ab7f08fd4269a4b9bb673e4e76af74d1
-
SHA256
500c77db41feb6fb947c685abb946461a48a05e7956949d03598574b396adfb2
-
SHA512
dff4aee318bc2ced653dad5d58a5450e521da8ed184fe2c26134e330bb54ea485e1657210b92cb58eab661327a6221da478f365ca9d99e4976a08a17a4dcb918
-
SSDEEP
6144:I+YI6BIOo3z1ObRWHJ6kd1B6lXRmuTI1wBkN7lwxKEpI5CpItrdw+w:IxIxBj1nBqR5Xul6p5pqrKr
Malware Config
Signatures
Files
-
500c77db41feb6fb947c685abb946461a48a05e7956949d03598574b396adfb2.exe windows x86
2bd6a1263d55a18ce3742998a1f8474d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvidctl
GetProxyDllInfo
advapi32
CredFree
dhcpcsvc
DhcpUndoRequestParams
kernel32
RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess
user32
GetMessageA
RegisterClassA
ole32
StgOpenStorage
Sections
.edata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ