Static task
static1
Behavioral task
behavioral1
Sample
20be1fdaf7052bc0c3d3198b1998adca3dfc17f551d70a621193fd8144908cce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20be1fdaf7052bc0c3d3198b1998adca3dfc17f551d70a621193fd8144908cce.exe
Resource
win10v2004-20221111-en
General
-
Target
20be1fdaf7052bc0c3d3198b1998adca3dfc17f551d70a621193fd8144908cce
-
Size
172KB
-
MD5
08859eecfa090f775c68fdaa435faae0
-
SHA1
b87be6090d87e199eee79009dd3b18accc3afb48
-
SHA256
20be1fdaf7052bc0c3d3198b1998adca3dfc17f551d70a621193fd8144908cce
-
SHA512
8813e7329e0dcb1b377efde5792b196bf512ed611ef8930ce4057c55b569b9c600aa1cb4473df67f4e2cb63122a6720d3409a8285ab0becc4e3ec91eba7263a5
-
SSDEEP
1536:4jjuvvQZu7zwIybpEA3Z0SsTkxDfaoprh9i6rMCWLe8c8BetDHEYDuxviu0MAX0e:iu3QZjIybpEAp0SRJi6rNLtOiuA62
Malware Config
Signatures
Files
-
20be1fdaf7052bc0c3d3198b1998adca3dfc17f551d70a621193fd8144908cce.exe windows x86
4803607f0561f618d58c6e43d6c3d627
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
msvcrt
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_cexit
tolower
wprintf
wcschr
exit
iswprint
__wgetmainargs
wcsrchr
vwprintf
__iob_func
fflush
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupCopyOEMInfW
SetupDiGetClassDevsW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE