?TLS@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
0d6015f284f962cc173a1efd292a9fbc1329f733d0d32883339fe7ff6a30a5e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0d6015f284f962cc173a1efd292a9fbc1329f733d0d32883339fe7ff6a30a5e4.exe
Resource
win10v2004-20221111-en
General
-
Target
0d6015f284f962cc173a1efd292a9fbc1329f733d0d32883339fe7ff6a30a5e4
-
Size
142KB
-
MD5
3cb61c50bac607a9fcf4abed36b73310
-
SHA1
a7e1af6114ed39d9218ec3769420e6b3603f218e
-
SHA256
0d6015f284f962cc173a1efd292a9fbc1329f733d0d32883339fe7ff6a30a5e4
-
SHA512
a58b00bb202a047708dbc4d738a7a7e01d3971d4bf7ffac715607118337448a280413164d97f7b4533b23d647a7c959cca5ae469bc4a0b62e91ea2b487ce377b
-
SSDEEP
3072:0kf+qFjRjrdE6WVbeJRV1MAIPMocLNsPAZoSGwaBor:0FqFtjC6JV1MAIPfILZoSvaG
Malware Config
Signatures
Files
-
0d6015f284f962cc173a1efd292a9fbc1329f733d0d32883339fe7ff6a30a5e4.exe windows x86
226c86110ac9d2e5a37a346246dd65d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
CreateDirectoryW
GetStdHandle
CopyFileW
GetDriveTypeA
LocalAlloc
FindResourceA
VerifyVersionInfoW
InitializeCriticalSection
IsBadReadPtr
FormatMessageW
CreateMailslotW
GetCommModemStatus
FoldStringW
IsValidLanguageGroup
CreateThread
GetUserDefaultLangID
LocalUnlock
CreateMutexW
GetFileAttributesA
IsBadCodePtr
GetSystemDefaultUILanguage
SetLocalTime
GetTickCount
GlobalAddAtomA
GetCommConfig
ReleaseMutex
GetThreadLocale
FlushFileBuffers
WinExec
lstrlenA
TlsGetValue
FormatMessageA
SetWaitableTimer
IsDBCSLeadByte
GetFileAttributesExW
LoadLibraryA
FindFirstChangeNotificationW
GetFileSize
GetCurrentThread
WideCharToMultiByte
FreeResource
SetSystemTime
GetNumberFormatW
GetPriorityClass
lstrcpynW
CreateEventA
FindClose
SetThreadContext
GetVersionExW
SetPriorityClass
HeapSize
MoveFileExW
GetOverlappedResult
GetLongPathNameW
OpenFileMappingW
UnhandledExceptionFilter
SetupComm
EnumResourceNamesW
FindCloseChangeNotification
GlobalLock
DeleteAtom
ResumeThread
HeapUnlock
ExitThread
lstrcmpA
DeleteFileW
GetHandleInformation
SetCurrentDirectoryA
GetUserDefaultLCID
GetTempFileNameW
GetCurrentThreadId
IsDBCSLeadByteEx
CreateEventW
TryEnterCriticalSection
lstrcatW
EnumResourceLanguagesA
AddAtomA
GetFullPathNameW
lstrlenW
VirtualProtect
CreateFileA
RemoveDirectoryA
GetCurrentDirectoryA
GlobalSize
SystemTimeToFileTime
GetWindowsDirectoryW
VirtualFree
GetStartupInfoW
GetLocaleInfoW
SetCommMask
GetSystemDirectoryA
GetShortPathNameA
GlobalFlags
GlobalAddAtomW
DeleteFileA
FileTimeToLocalFileTime
GetExitCodeThread
SizeofResource
lstrcatA
ClearCommError
CreateWaitableTimerW
OpenSemaphoreW
GetModuleFileNameW
SetFilePointer
GetCommandLineW
GetOEMCP
Exports
Exports
Sections
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdata Size: 1024B - Virtual size: 710B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ