Static task
static1
Behavioral task
behavioral1
Sample
7dd195d769a7f64b6792d50ef1c3863ea61b9b7652c473026b0f03374bb95548.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7dd195d769a7f64b6792d50ef1c3863ea61b9b7652c473026b0f03374bb95548.exe
Resource
win10v2004-20221111-en
General
-
Target
7dd195d769a7f64b6792d50ef1c3863ea61b9b7652c473026b0f03374bb95548
-
Size
99KB
-
MD5
13d402157c104e95dd25c9e302b9a970
-
SHA1
6ea8b876974b2ff59ea701295e8953898a816ec7
-
SHA256
7dd195d769a7f64b6792d50ef1c3863ea61b9b7652c473026b0f03374bb95548
-
SHA512
d269f3996a8a5b3516f6ada8846d3c1a902a7c9125f1a72ced5ae8ec450ba3ae23d9c90a1c3ef963badd62e0fcbf4f930c0bdb605a47b71f58a8d2344cbb16b2
-
SSDEEP
1536:uCuwhSUXY5eCwKW9fHkd34dJf65DxyPVTB2LFLbi0Uuo3RoWWvjWLGlP2Eh6KmB:utSY0CJd34Cs9V2JHi0Uuoy7wGMEhKB
Malware Config
Signatures
Files
-
7dd195d769a7f64b6792d50ef1c3863ea61b9b7652c473026b0f03374bb95548.exe windows x86
74a4327c46cb569e9ea19dced965189a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libpq
ord21
ord33
ord34
ord35
ord37
ord45
ord48
ord2
ord14
ord140
ord4
ord15
ord88
kernel32
GetCurrentThreadId
GetCurrentProcessId
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetStdHandle
SetConsoleMode
GetConsoleMode
GetSystemTimeAsFileTime
msvcr80
fputs
fclose
getenv
fopen
strchr
_amsg_exit
fflush
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
fgets
_errno
sprintf
memmove
fwrite
memset
feof
free
realloc
malloc
__iob_func
exit
__getmainargs
_strdup
libintl-8
libintl_gettext
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE