?SETRESULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
1dbf435c2c8524e844e49705f75aa45bc2f8325ce5dda66b24491cb3289cb427.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1dbf435c2c8524e844e49705f75aa45bc2f8325ce5dda66b24491cb3289cb427.exe
Resource
win10v2004-20221111-en
General
-
Target
1dbf435c2c8524e844e49705f75aa45bc2f8325ce5dda66b24491cb3289cb427
-
Size
88KB
-
MD5
91016c3fbd04b5115a89c3e1f5927961
-
SHA1
1aa0c0316f2074dbf922bf485ba285fc2f9fd99d
-
SHA256
1dbf435c2c8524e844e49705f75aa45bc2f8325ce5dda66b24491cb3289cb427
-
SHA512
3ebd9693466bb84a70d4cd931b14dab75c460298e3babb55ca6d04ab31820f2724ad76e669486be9ac8b52db035e5b1802aaf8b85ab52f7d15e74cf0dafd8026
-
SSDEEP
1536:s2OUbZg3efzf4et0p+e85tVkh9oBydm6UWU+EnX:s2jb8efb4l+TthBaURX
Malware Config
Signatures
Files
-
1dbf435c2c8524e844e49705f75aa45bc2f8325ce5dda66b24491cb3289cb427.exe windows x86
bfb5e69607dedc241d611b30b797b7fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileW
GetModuleHandleA
WriteFile
VirtualFree
GetThreadPriority
GetProcAddress
VirtualAlloc
CloseHandle
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
ExitProcess
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
user32
LoadBitmapA
LoadIconA
ws2_32
recv
closesocket
select
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT3 Size: 4KB - Virtual size: 18B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 4KB - Virtual size: 413B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ