Static task
static1
Behavioral task
behavioral1
Sample
f5402324bf14165cae13ef77b5b7653d28178dc83b4cd871d2369eebbf086137.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f5402324bf14165cae13ef77b5b7653d28178dc83b4cd871d2369eebbf086137.exe
Resource
win10v2004-20221111-en
General
-
Target
f5402324bf14165cae13ef77b5b7653d28178dc83b4cd871d2369eebbf086137
-
Size
46KB
-
MD5
5b7889634d320d53608cb550fd35877f
-
SHA1
a81363db7dd06f87db3999add6f285b3fcf8a42c
-
SHA256
f5402324bf14165cae13ef77b5b7653d28178dc83b4cd871d2369eebbf086137
-
SHA512
16d4c575c9a4cc563bc1f3e652cf08ff854b83a31c766a8199ff48ceeb1f5370f6aed3c990f3687c53bd9db5a15734f612eb42639579e7c556f96be147acaab0
-
SSDEEP
768:mJ53pAucjhjIBzEr0esaJ2FVKXSOr+fvJipsr7bhHoXs+LtdutorFE:Ilcjhc1iv0FBOrIvMs3J5s8
Malware Config
Signatures
Files
-
f5402324bf14165cae13ef77b5b7653d28178dc83b4cd871d2369eebbf086137.exe windows x86
76c5a0963aee2f9597cd2e0afd33d368
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
FatalExit
EnterCriticalSection
Sleep
OpenEventW
CopyFileA
VirtualAlloc
InterlockedExchange
DeleteTimerQueue
GetFileSize
GetModuleHandleW
BeginUpdateResourceW
AddAtomW
CancelTimerQueueTimer
CloseHandle
MoveFileA
ExitThread
TerminateProcess
SetUnhandledExceptionFilter
ClearCommBreak
GlobalAddAtomW
CancelIo
EnumDateFormatsExW
OpenDataFile
WideCharToMultiByte
OpenConsoleW
CreateMutexW
AllocConsole
DeactivateActCtx
GetTempPathW
CreateMemoryResourceNotification
FindAtomW
GetLastError
GetCurrentProcessId
LeaveCriticalSection
GetConsoleNlsMode
GlobalAlloc
DeleteCriticalSection
ws2_32
connect
accept
send
WSACleanup
WSAStartup
WSAAsyncSelect
bind
closesocket
listen
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ