?__ULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
0ce53045482931d2572d8819d6bd2d975aa02d3fb131ebf17f3779b12e0cd234.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ce53045482931d2572d8819d6bd2d975aa02d3fb131ebf17f3779b12e0cd234.exe
Resource
win10v2004-20221111-en
General
-
Target
0ce53045482931d2572d8819d6bd2d975aa02d3fb131ebf17f3779b12e0cd234
-
Size
88KB
-
MD5
4c38aad8808e3589ca2a0b2de7ba36c0
-
SHA1
65058b9ff1d7b82877a68d9455acc07dccc00df5
-
SHA256
0ce53045482931d2572d8819d6bd2d975aa02d3fb131ebf17f3779b12e0cd234
-
SHA512
91494c658da25ad0703d98b225f38cd4b3597dfddb08b0fb6a00a017e92dd7fad795736ba4ad3be126ccb6a000a33b68dac5e5a902e957ef4370feccd1f92c7a
-
SSDEEP
768:lJxUvAIky4crEreE+bnJsFz0pxKTe85FHRHk5RUoFpPm0gdi41lYLay:lLzIzE4et0p+e85tVk5Koh3ol
Malware Config
Signatures
Files
-
0ce53045482931d2572d8819d6bd2d975aa02d3fb131ebf17f3779b12e0cd234.exe windows x86
b762814d4020c0e6819ef1b495d9b561
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetProcAddress
VirtualAlloc
CloseHandle
RtlUnwind
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
HeapReAlloc
HeapAlloc
VirtualFree
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
Sleep
GetCurrentThreadId
GetTickCount
ExitProcess
HeapFree
QueryPerformanceCounter
user32
SetFocus
LoadImageA
LoadIconA
ole32
CoInitialize
ws2_32
recv
select
closesocket
winmm
auxSetVolume
mciSendCommandA
avifil32
AVIClearClipboard
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 4KB - Virtual size: 462B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ