Static task
static1
Behavioral task
behavioral1
Sample
0612775a1a7ee0202adcdb0615bdb5bfeab99f35c062974bae43790bb3973b56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0612775a1a7ee0202adcdb0615bdb5bfeab99f35c062974bae43790bb3973b56.exe
Resource
win10v2004-20221111-en
General
-
Target
0612775a1a7ee0202adcdb0615bdb5bfeab99f35c062974bae43790bb3973b56
-
Size
64KB
-
MD5
4524d43139fa879a828ad3ea3b1ebda0
-
SHA1
ef760650195978b858bb14a63422ed774fac860d
-
SHA256
0612775a1a7ee0202adcdb0615bdb5bfeab99f35c062974bae43790bb3973b56
-
SHA512
4690b4d7f5aff70a801611764fb9db899ef7ea5a7c9d2d28d4e5a4f762692acb74c5b675f2c24133de416fc9c7cd6c13c04967fbdf8f7e51d36b6958327581c4
-
SSDEEP
192:3ntU79RB/AOjZfca+kMZIKzw0uMR6pkqJTKRdZMFu2tx+8dE3UzSYUrGuunKRdZ2:XsUo0uW6d1xq3UZU9w1xq3UZU92pLz
Malware Config
Signatures
Files
-
0612775a1a7ee0202adcdb0615bdb5bfeab99f35c062974bae43790bb3973b56.exe windows x86
c0e807c198222a9c7ef446fbc8f5d145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
MapViewOfFile
CloseHandle
GetFileAttributesW
CreateMutexW
CreateProcessW
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
user32
EnumWindows
GetWindowTextW
wsprintfW
SendMessageW
msvcr80
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_wcmdln
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcsstr
wcsncpy
_wcsicmp
_adjust_fdiv
memset
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ