Static task
static1
Behavioral task
behavioral1
Sample
814048cdbe3da3d3c4ac1c04563793df020b35cf9f23de6e6dbb9c7560254178.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
814048cdbe3da3d3c4ac1c04563793df020b35cf9f23de6e6dbb9c7560254178.exe
Resource
win10v2004-20221111-en
General
-
Target
814048cdbe3da3d3c4ac1c04563793df020b35cf9f23de6e6dbb9c7560254178
-
Size
88KB
-
MD5
04205d0fb76756178719deee999e4850
-
SHA1
03ea6ed3c4b2a8fbc91e9ecc1809dd1f07638cef
-
SHA256
814048cdbe3da3d3c4ac1c04563793df020b35cf9f23de6e6dbb9c7560254178
-
SHA512
dce73406a8b0d9e20ff505b363877b9b36b7e5a73859462f7302904a3563ae1a317457dec12efabfd9a96ec49a066c3ac45301865ac7392e45c73f1109ef226b
-
SSDEEP
1536:xJ2vUtA/MtTtHvpJUEbooPRrKKRi3fbl:KUtHxJltZrpRi3fbl
Malware Config
Signatures
Files
-
814048cdbe3da3d3c4ac1c04563793df020b35cf9f23de6e6dbb9c7560254178.exe windows x86
ffb68c01d11dfe4e626ad48c24b90cba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
GetProcAddress
TerminateProcess
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LocalAlloc
GetComputerNameExW
LocalFree
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TlsFree
TlsGetValue
GetStringTypeW
GetComputerNameW
lstrlenA
IsBadWritePtr
GetLastError
TlsSetValue
GetCurrentProcessId
GetStartupInfoA
InterlockedExchange
GetModuleHandleA
advapi32
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExW
RegDeleteKeyA
RegCloseKey
msvcrt
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_cexit
__p__commode
atol
_chmod
__getmainargs
setupapi
SetupDiGetDeviceInstanceIdW
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ