Static task
static1
Behavioral task
behavioral1
Sample
959caf33e3d5dba46c30c8683b9426eb1cbbc76a07f20d4554892ac1a3b20f03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
959caf33e3d5dba46c30c8683b9426eb1cbbc76a07f20d4554892ac1a3b20f03.exe
Resource
win10v2004-20220812-en
General
-
Target
959caf33e3d5dba46c30c8683b9426eb1cbbc76a07f20d4554892ac1a3b20f03
-
Size
6KB
-
MD5
e330110b9aa3276035090cde0d53236f
-
SHA1
8766ed9b8adebed15e24f37dbd5b92594daffefa
-
SHA256
959caf33e3d5dba46c30c8683b9426eb1cbbc76a07f20d4554892ac1a3b20f03
-
SHA512
fbd6a526f79793d9b45ec26f82104c6d4ffebae1f0d90b30c22bd7162db2a5ddc924f179f79f9198d24b78daba4b468ebbdd6a84d9baa40538ee113b169972c4
-
SSDEEP
96:lqwSqsRmGZeRQupz0OP9RtnEnNLySEbdApjqHY5SEwklFFrkmBc5fUbcjY5VA8y:5khZeRQVOFRtnAdySQAFDkmOUh5u
Malware Config
Signatures
Files
-
959caf33e3d5dba46c30c8683b9426eb1cbbc76a07f20d4554892ac1a3b20f03.exe windows x86
f1d64282b9f707b87698a250b6b5f84c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
FreeLibrary
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
GetTickCount
SetLastError
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ