antiemu32
Static task
static1
Behavioral task
behavioral1
Sample
b3143e7024d865b78e66199e722b4159342558e78eb25777fcecdb70ec406442.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3143e7024d865b78e66199e722b4159342558e78eb25777fcecdb70ec406442.exe
Resource
win10v2004-20220812-en
General
-
Target
b3143e7024d865b78e66199e722b4159342558e78eb25777fcecdb70ec406442
-
Size
797KB
-
MD5
c58e180db9fd235c65cb2ad13733cf0f
-
SHA1
627466a8010e3d36a87afaa16c64593b14b64fbf
-
SHA256
b3143e7024d865b78e66199e722b4159342558e78eb25777fcecdb70ec406442
-
SHA512
175634a10cd63fb180b273b00763bc16dcd5352cc29c642d2711b4d880af6ac4e380dd5fd5a5f67220685338d2dce48b36e095ff41f5fe203780b66e9eb1978a
-
SSDEEP
24576:QL7BphknxWn2E8QCCPS4o/PhbXstzc9evNJ0JeZ/r:o7B/kxACCatNkzgev70Jet
Malware Config
Signatures
Files
-
b3143e7024d865b78e66199e722b4159342558e78eb25777fcecdb70ec406442.exe windows x86
5722b64da48a9a03e05edd0e00d541f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetProcessHeap
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess
shell32
SHBrowseForFolderA
SHGetDesktopFolder
ole32
CoInitialize
netapi32
NetApiBufferAllocate
secur32
QuerySecurityPackageInfoA
DeleteSecurityContext
FreeCredentialsHandle
Exports
Exports
Sections
.text Size: 731KB - Virtual size: 731KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oiu Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdsh Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sock Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sock2 Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ