?SETRESULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
70f27db8503cc85d8a9103f0ac37b5d99ced0f063548e70ae08c24a15dcbed13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70f27db8503cc85d8a9103f0ac37b5d99ced0f063548e70ae08c24a15dcbed13.exe
Resource
win10v2004-20220901-en
General
-
Target
70f27db8503cc85d8a9103f0ac37b5d99ced0f063548e70ae08c24a15dcbed13
-
Size
96KB
-
MD5
48449af77fe691f3f1e7b4f8490e27f0
-
SHA1
9ac2087a10412ca6d0a2375f7858b96aae5def13
-
SHA256
70f27db8503cc85d8a9103f0ac37b5d99ced0f063548e70ae08c24a15dcbed13
-
SHA512
6286f8d5c3e8a912b747c983ebd12c912d5dfba330be965b7a2ad3d17bec30bc2bd0734e3dc70c4b832993b2ee234c64c9a2fa8e6355488b78e841e367b6fcb0
-
SSDEEP
1536:YXjGeIELQRsiixO3i6uOb7SLqxmP/ymm6UWU+EqEU:YXaenQRsj8y63HSlX3URqF
Malware Config
Signatures
Files
-
70f27db8503cc85d8a9103f0ac37b5d99ced0f063548e70ae08c24a15dcbed13.exe windows x86
e5316c0c22c47b3f6fa036d705194cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileW
CloseHandle
GetModuleHandleA
WriteFile
VirtualFree
GetProcAddress
VirtualAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
ExitProcess
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
user32
LoadIconA
LoadBitmapA
ws2_32
recv
select
closesocket
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 4KB - Virtual size: 405B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ