?__ULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
a2987fb7d19ada76afaffb328b1e27bfab0b300eccf3cc1b7a341f321dc28769.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2987fb7d19ada76afaffb328b1e27bfab0b300eccf3cc1b7a341f321dc28769.exe
Resource
win10v2004-20221111-en
General
-
Target
a2987fb7d19ada76afaffb328b1e27bfab0b300eccf3cc1b7a341f321dc28769
-
Size
88KB
-
MD5
384c60eac1de889da8d572304d0ca9f0
-
SHA1
540e62b50b9dfed58d79d4c42a9703736730f0f2
-
SHA256
a2987fb7d19ada76afaffb328b1e27bfab0b300eccf3cc1b7a341f321dc28769
-
SHA512
487f003ee89e3d417675ed90cb31064bee033e8b7be874eb78849c555eb76913af006ad6caea7d1fd0ea097cb63721d4845f639bd6ec27958475247fb0c06848
-
SSDEEP
768:lJxUvAIhx4crEreE+bnJsFz0pxKTe85FHRHk5RUoFZPm0gdi41lYLay:lLzI/E4et0p+e85tVk5KoR3ol
Malware Config
Signatures
Files
-
a2987fb7d19ada76afaffb328b1e27bfab0b300eccf3cc1b7a341f321dc28769.exe windows x86
b762814d4020c0e6819ef1b495d9b561
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetProcAddress
VirtualAlloc
CloseHandle
RtlUnwind
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
HeapReAlloc
HeapAlloc
VirtualFree
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
Sleep
GetCurrentThreadId
GetTickCount
ExitProcess
HeapFree
QueryPerformanceCounter
user32
SetFocus
LoadImageA
LoadIconA
ole32
CoInitialize
ws2_32
recv
select
closesocket
winmm
auxSetVolume
mciSendCommandA
avifil32
AVIClearClipboard
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 4KB - Virtual size: 462B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ