Static task
static1
Behavioral task
behavioral1
Sample
03f611580f6a045ae4c0aa0e611a9695b2e27ecbee1594aafbdeff6b9a8f2cda.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
03f611580f6a045ae4c0aa0e611a9695b2e27ecbee1594aafbdeff6b9a8f2cda.exe
Resource
win10v2004-20220812-en
General
-
Target
03f611580f6a045ae4c0aa0e611a9695b2e27ecbee1594aafbdeff6b9a8f2cda
-
Size
119KB
-
MD5
321cfda9e1ff3f1abb1a0eae3caebde0
-
SHA1
34475ab0cb5baf0e80c3626acf5d4bb89b79987d
-
SHA256
03f611580f6a045ae4c0aa0e611a9695b2e27ecbee1594aafbdeff6b9a8f2cda
-
SHA512
7cf16d9610e3900e4ac890b931c42c53f364f6c726155531a093ac7d13389b1fb834baab0f29a67506e5aba17841920e77525ebcf34a08daab1c0d3d59081fd3
-
SSDEEP
3072:/5K8+jGod+t0IB6B0fPf0h2oR5PYsmNC9U449A59H6YqNY1qnZ:/5ua+IVfPfePYTC9UXmmNP
Malware Config
Signatures
Files
-
03f611580f6a045ae4c0aa0e611a9695b2e27ecbee1594aafbdeff6b9a8f2cda.exe windows x86
0c45f3b0f2ac80f582cbe69fcb1ea23f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetProcAddress
GetModuleHandleW
CloseHandle
Sleep
GetLastError
CreateFileA
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
UnhandledExceptionFilter
msvcrt
_open_osfhandle
ctime
time
_read
_write
_close
_lseek
remove
_strnicmp
_eof
_open
fclose
fprintf
fopen
_ftol2_sse
clock
atoi
setvbuf
_iob
_vsnprintf
_stat
_unlink
_errno
_mkdir
_tempnam
fwrite
fread
ferror
feof
tolower
__getmainargs
_cexit
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
_ltoa_s
memset
isdigit
toupper
__doserrno
atol
strchr
strncmp
strspn
_stricmp
memcpy
strpbrk
printf
malloc
_strdup
free
exit
memmove
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
user32
CharNextExA
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xtxumma Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE