?__ULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
4d2dc8955179c37d22ec359df962bbd326d6a7c4d3a757334dfbcf92bced5a17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d2dc8955179c37d22ec359df962bbd326d6a7c4d3a757334dfbcf92bced5a17.exe
Resource
win10v2004-20220812-en
General
-
Target
4d2dc8955179c37d22ec359df962bbd326d6a7c4d3a757334dfbcf92bced5a17
-
Size
84KB
-
MD5
02d9a709ef9f601c0a8b9272c341de30
-
SHA1
17d5c5d377ebf362950bcf618d6669924bf8e16a
-
SHA256
4d2dc8955179c37d22ec359df962bbd326d6a7c4d3a757334dfbcf92bced5a17
-
SHA512
cdd89e0a8186a24b486a2414f992d55f8df61e02cf451b3a0ac06d9d9b29fecce8a55f6dae1e2b95c11691c6fa2c13816a6c52b620b6d83c604792fb61839437
-
SSDEEP
768:gagCidR3sc1freE+bnJsFz0pxKTe85FHRHkcqSUoFpPmqdiYZcYLjy+:gagVRRf4et0p+e85tVkh9oh5c6
Malware Config
Signatures
Files
-
4d2dc8955179c37d22ec359df962bbd326d6a7c4d3a757334dfbcf92bced5a17.exe windows x86
329fd679301e8b70fa7ff64d0650d282
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetProcAddress
VirtualAlloc
CloseHandle
RtlUnwind
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
HeapReAlloc
HeapAlloc
VirtualFree
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
Sleep
GetCurrentThreadId
GetTickCount
ExitProcess
HeapFree
QueryPerformanceCounter
user32
SetFocus
LoadImageA
LoadIconA
ole32
CoInitialize
ws2_32
select
recv
closesocket
winmm
auxSetVolume
mciSendCommandA
avifil32
AVIClearClipboard
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT3 Size: 4KB - Virtual size: 480B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ