Static task
static1
Behavioral task
behavioral1
Sample
d7f194e50c9cf3c5cc3a8f7a5ad0db8dc241305580e3bb6dac5b8ae6a06c5198.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7f194e50c9cf3c5cc3a8f7a5ad0db8dc241305580e3bb6dac5b8ae6a06c5198.exe
Resource
win10v2004-20220812-en
General
-
Target
d7f194e50c9cf3c5cc3a8f7a5ad0db8dc241305580e3bb6dac5b8ae6a06c5198
-
Size
7.5MB
-
MD5
0c78ca375b6ac4aef7b698d435749954
-
SHA1
6f8430881653ec952aadfcaa1502ecb16cbb6c5c
-
SHA256
d7f194e50c9cf3c5cc3a8f7a5ad0db8dc241305580e3bb6dac5b8ae6a06c5198
-
SHA512
a8648ac8407d38416693c5be4f10318fd2d37c914fc7dbbc83a46598fa5f2bae3f365bf402f4f67da915c5601f064ae8eea5808f623005844392fe575613149d
-
SSDEEP
196608:tcwY9OOAAOUKiKrG2KCXuAm4ulN/nGQh2JLJWIfEylPwwPalbJ8WP:tcwY91CUSG2KCXuj4G/d2JLlfEgPwwPk
Malware Config
Signatures
Files
-
d7f194e50c9cf3c5cc3a8f7a5ad0db8dc241305580e3bb6dac5b8ae6a06c5198.exe windows x86
563492d5a529acab0d8df736c34e9dd2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualFree
VirtualAlloc
GetModuleHandleW
SetThreadAffinityMask
GetCurrentProcessId
GetProcessWorkingSetSize
GetCurrentThread
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualQuery
IsDebuggerPresent
advapi32
GetUserNameW
shlwapi
StrToIntExW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 33B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ