Static task
static1
Behavioral task
behavioral1
Sample
5ecd30d970a9415650ba8f2f1585baa0ad20f403bd51043a2e23b5a7471dbf9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ecd30d970a9415650ba8f2f1585baa0ad20f403bd51043a2e23b5a7471dbf9a.exe
Resource
win10v2004-20220812-en
General
-
Target
5ecd30d970a9415650ba8f2f1585baa0ad20f403bd51043a2e23b5a7471dbf9a
-
Size
89KB
-
MD5
7f6b818b0f6a6c94cdc1612d2e6c1548
-
SHA1
f529757952ec1e0f878886330896b706f20c11d0
-
SHA256
5ecd30d970a9415650ba8f2f1585baa0ad20f403bd51043a2e23b5a7471dbf9a
-
SHA512
9a185af21dc6458b56457ab5dffb1cbc2d63e13311c83de0b62874704d98f2884c1c34df93e70f5b53e98545d0fe6bab0cb7b38fd6d0c303f815508e663fa0e9
-
SSDEEP
1536:CWpeyBK28HR15voGzOvDnkU1bngC4D2z6NhErD+s489:CWpzX8lANTygInI
Malware Config
Signatures
Files
-
5ecd30d970a9415650ba8f2f1585baa0ad20f403bd51043a2e23b5a7471dbf9a.exe windows x86
2d6a0649f1f3bc4776be69a335edbe87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
UnhandledExceptionFilter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
CloseHandle
msvcrt
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
exit
_XcptFilter
_exit
_cexit
__getmainargs
sprintf
printf
fltlib
FilterSendMessage
FilterConnectCommunicationPort
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE