Static task
static1
Behavioral task
behavioral1
Sample
0360d31ec20fa4dcd664cd74f8b4d0c9c35515eb88ba86b49a51fc49347d4993.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0360d31ec20fa4dcd664cd74f8b4d0c9c35515eb88ba86b49a51fc49347d4993.exe
Resource
win10v2004-20220901-en
General
-
Target
0360d31ec20fa4dcd664cd74f8b4d0c9c35515eb88ba86b49a51fc49347d4993
-
Size
33KB
-
MD5
9ad45c81d2e846188c8dcbd5bf0076ff
-
SHA1
0038a2f824a0513bea8c995e65602793088f995c
-
SHA256
0360d31ec20fa4dcd664cd74f8b4d0c9c35515eb88ba86b49a51fc49347d4993
-
SHA512
fd1c87a9cdd0d3a7121466c33d879247e043680fb176c88bca656b64b402520ddd81760188cb6eddd7f7a823e13887266c7fd07c367267ef4d224c1da6763532
-
SSDEEP
768:zJUpWsODSmFXabdSZYrD1Czr2fildhzftpLw8jJCdZ9JmDhbrXp+:z2VODSm1alUyildNbJjJCD9JmtV
Malware Config
Signatures
Files
-
0360d31ec20fa4dcd664cd74f8b4d0c9c35515eb88ba86b49a51fc49347d4993.exe windows x86
6520fc45a6d55f0dd542fdd30097ee44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
api-ms-win-service-core-l1-1-0
StartServiceCtrlDispatcherW
SetServiceStatus
api-ms-win-service-winsvc-l1-1-0
RegisterServiceCtrlHandlerW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-interlocked-l1-1-0
InterlockedCompareExchange
InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0
GetModuleHandleA
api-ms-win-core-misc-l1-1-0
Sleep
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0
CreateEventW
SetEvent
WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE