Static task
static1
Behavioral task
behavioral1
Sample
12639bb2046823e7a66b19395359143636081e5afb00d9459744f7e8f051bd63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12639bb2046823e7a66b19395359143636081e5afb00d9459744f7e8f051bd63.exe
Resource
win10v2004-20221111-en
General
-
Target
12639bb2046823e7a66b19395359143636081e5afb00d9459744f7e8f051bd63
-
Size
60KB
-
MD5
1319874bf0a134c593d1171d50c42536
-
SHA1
5980479d59e85fa1b15ff3bfc30552c728f55219
-
SHA256
12639bb2046823e7a66b19395359143636081e5afb00d9459744f7e8f051bd63
-
SHA512
52d6a7a10e02b871a346a43225fb04cbfe303327cfb0a2afa36276919658780b087363768588bf4941f2ef01f209ea25dd548f358366fa339684311e5e0cf550
-
SSDEEP
1536:K6NVEml6wSrikbPO36bPe9wOguuttMMTTyyBB88DDeeddYYvvqq55UUbbJJ66//u:K6NVEDrDWKTe95
Malware Config
Signatures
Files
-
12639bb2046823e7a66b19395359143636081e5afb00d9459744f7e8f051bd63.exe windows x86
784cee9efc8996109214f49c5227f523
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
GetTickCount
SetLastError
GetProcAddress
VirtualAlloc
FreeLibrary
DisableThreadLibraryCalls
LoadLibraryW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentThreadId
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE