Static task
static1
Behavioral task
behavioral1
Sample
036609dfd02ab114229ff8b2189605d7de90c51baff8ea1afb765855fac381c4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
036609dfd02ab114229ff8b2189605d7de90c51baff8ea1afb765855fac381c4.exe
Resource
win10v2004-20221111-en
General
-
Target
036609dfd02ab114229ff8b2189605d7de90c51baff8ea1afb765855fac381c4
-
Size
196KB
-
MD5
1412b8189de5be1c66adacccf33a6e34
-
SHA1
59b04145fb39b11b42a0de68462c089533a1ec5e
-
SHA256
036609dfd02ab114229ff8b2189605d7de90c51baff8ea1afb765855fac381c4
-
SHA512
2569074be5a484497518a2abe74bf741322ebb57ba5fe423ebb00a82900b0d95a13d5cb97de5690c4ffe1a55e4cdf95f22d73b48963f86cfb5451ddddd7637b7
-
SSDEEP
3072:HGkvB9tvnja+hxyu7i8VZx2tr8xOYyc8FElXAoMGYW:HGk9m+h8u28Sr8DlQ/F
Malware Config
Signatures
Files
-
036609dfd02ab114229ff8b2189605d7de90c51baff8ea1afb765855fac381c4.exe windows x86
930cd8c80c1721f869b6ee8d13e3f7b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetProcessHeap
GetConsoleOutputCP
QueryPerformanceCounter
GetLastError
lstrcmpiW
GlobalFindAtomW
GetStartupInfoA
DeleteFileW
GetCurrentProcess
MulDiv
DeleteFileA
lstrlenW
GetCurrentProcessId
GetCommandLineW
GetModuleHandleW
SetLastError
GetACP
Sleep
CopyFileA
GetCommandLineA
GetCurrentThreadId
GetWindowsDirectoryA
RemoveDirectoryA
GetThreadLocale
LoadLibraryW
GetUserDefaultLangID
GetDriveTypeA
GetVersion
GetCurrentThread
SetCurrentDirectoryA
GlobalFindAtomA
GetModuleHandleA
GetOEMCP
lstrcmpiA
lstrcmpA
GetTickCount
IsDebuggerPresent
VirtualAlloc
user32
GetSystemMetrics
GetDC
GetDesktopWindow
CharNextA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ