Static task
static1
Behavioral task
behavioral1
Sample
32e91a7f60590605de29a89492174cd8f4e90be1dabeabe38a01f439ed3d7c09.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32e91a7f60590605de29a89492174cd8f4e90be1dabeabe38a01f439ed3d7c09.exe
Resource
win10v2004-20220812-en
General
-
Target
32e91a7f60590605de29a89492174cd8f4e90be1dabeabe38a01f439ed3d7c09
-
Size
18KB
-
MD5
7d0cdb4d2b8448f0b9a918d55123f956
-
SHA1
289562c3d137f4ce007e950842d2c25295b4681f
-
SHA256
32e91a7f60590605de29a89492174cd8f4e90be1dabeabe38a01f439ed3d7c09
-
SHA512
395c336cd8bb8294e94b3727604c768a58a4ebfb2f9d0c9bfdb33d15ab45ef168dad9bf02bfaf15a8f291747283dd934b8bbfae823889890e186cb5d2c681b2e
-
SSDEEP
384:6QgqoiiYO3KLvHUrqzRfqC+HomN2dOF25S7xV43Wa38rsW:6QgqoUtzWHomN2dOE5S7xLr
Malware Config
Signatures
Files
-
32e91a7f60590605de29a89492174cd8f4e90be1dabeabe38a01f439ed3d7c09.exe windows x86
133e0434c46f9e8f4f6448fee5239dbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_wcsicmp
swscanf
__CxxFrameHandler
free
malloc
_CxxThrowException
memmove
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscpy
wcslen
wprintf
advapi32
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegConnectRegistryW
RegCloseKey
RegOpenKeyExW
kernel32
GetModuleHandleA
FormatMessageW
VerifyVersionInfoW
VerSetConditionMask
GetLastError
GetFullPathNameW
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc
ole32
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoCreateInstance
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
SysStringLen
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantClear
SysAllocString
SysFreeString
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ