Static task
static1
Behavioral task
behavioral1
Sample
20781240a498f17d8224d9a8812fdbb4685344d03f191cf295d5300fc2630845.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20781240a498f17d8224d9a8812fdbb4685344d03f191cf295d5300fc2630845.exe
Resource
win10v2004-20221111-en
General
-
Target
20781240a498f17d8224d9a8812fdbb4685344d03f191cf295d5300fc2630845
-
Size
212KB
-
MD5
052491901b223ed6b4d932add963b43b
-
SHA1
023cf679f063b579333e85e81c1884f567097445
-
SHA256
20781240a498f17d8224d9a8812fdbb4685344d03f191cf295d5300fc2630845
-
SHA512
4051ed862c46c7e25f53825e4035deac80b0ae8ec17b4ff834e24545bfb1217244efdf429678112e99904a91cc8b768586cbc91f5a73e51b58f535b656e9ac47
-
SSDEEP
3072:6QbWZnoxW9XW0QLrHVMfXzYpFvcIkNCg+TeL3QAS9r6jgrPGyGofwnioGVcDLomV:eCWIDdT1s4eo9riAuyx9Ex7m0Ls2
Malware Config
Signatures
Files
-
20781240a498f17d8224d9a8812fdbb4685344d03f191cf295d5300fc2630845.exe windows x86
c223343a7bfc4367b70363d0a4f8fc9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetLocaleInfoW
LockResource
CloseHandle
HeapFree
GetOEMCP
HeapAlloc
GetSystemTimeAsFileTime
LoadLibraryW
FindResourceA
QueryDosDeviceA
GetTickCount
MultiByteToWideChar
GetCurrentProcess
GetLocalTime
GetProcessHeap
GetCurrentProcessId
WideCharToMultiByte
CreateFileA
lstrcmpA
GetVolumeInformationA
SetLastError
lstrlenA
SystemTimeToFileTime
lstrcpyA
QueryPerformanceCounter
schannel
MakeSignature
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
QuerySecurityPackageInfoA
secur32
GetComputerObjectNameA
FreeCredentialsHandle
ExportSecurityContext
EnumerateSecurityPackagesW
FreeContextBuffer
scecli
SceAddToNameStatusList
SceAppendSecurityProfileInfo
SceAddToObjectList
SceCloseProfile
SceBrowseDatabaseTable
SceAnalyzeSystem
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ