Static task
static1
Behavioral task
behavioral1
Sample
7bce0142266d07d7e3fc9450a6c9f29a82e8433b828dd4e123155f6e6abd3d36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bce0142266d07d7e3fc9450a6c9f29a82e8433b828dd4e123155f6e6abd3d36.exe
Resource
win10v2004-20220812-en
General
-
Target
7bce0142266d07d7e3fc9450a6c9f29a82e8433b828dd4e123155f6e6abd3d36
-
Size
55KB
-
MD5
4ea92730f28cbc07c9e53a58ba777439
-
SHA1
bc6dcd8fedc582993b01bb35b61ff92ed8d9b673
-
SHA256
7bce0142266d07d7e3fc9450a6c9f29a82e8433b828dd4e123155f6e6abd3d36
-
SHA512
3c9ec627d96fe64e9ce545fb6dd87481be809fed5afe5f5db68d6c6f36b8cc9e9f7159546dcfe66a8b3fe75454781ec53bf6a1f10f85d3b24c224da8dfd9311e
-
SSDEEP
768:qCX6fvSs8kJTSNqz0Buo+4dRsl9wV1gc+5pN1rS+2Qta2kFynxz6Rlnojtzb7:qC61J2pBN+mG9Rc+Xi/yncRlojJ
Malware Config
Signatures
Files
-
7bce0142266d07d7e3fc9450a6c9f29a82e8433b828dd4e123155f6e6abd3d36.exe windows x86
579b5f18499395abcab1189f0e782536
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
jli
JLI_Launch
msvcr100
_unlock
__dllonexit
_lock
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
kernel32
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE