Static task
static1
Behavioral task
behavioral1
Sample
0ac2495a7dda4243e18eef2970d57a5a862ab5d6af8e89a4dd68d46d00b08006.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ac2495a7dda4243e18eef2970d57a5a862ab5d6af8e89a4dd68d46d00b08006.exe
Resource
win10v2004-20220812-en
General
-
Target
0ac2495a7dda4243e18eef2970d57a5a862ab5d6af8e89a4dd68d46d00b08006
-
Size
518KB
-
MD5
2439a0464aa2e8cba7bec0bc1d50ed60
-
SHA1
8ee87773de32bebe441903988bc7d8bec667713a
-
SHA256
0ac2495a7dda4243e18eef2970d57a5a862ab5d6af8e89a4dd68d46d00b08006
-
SHA512
4899510bd284060f38052a2ef7c65ab67dc0d1e61ccc3b14e51f43676f44ab7231322733a5f7da6b8fe6040588f7d3bc37b89f3c0f29c06b0b873ee8187bc557
-
SSDEEP
6144:iExXqww7Ppt9lPazbgEJhDPPBEx1Ypbpb2YWfBiDQl5k0TtMkxda8+AK1p5zKZdm:FXtoPbTPazhJZIYpZI9OSk8x/djNIR
Malware Config
Signatures
Files
-
0ac2495a7dda4243e18eef2970d57a5a862ab5d6af8e89a4dd68d46d00b08006.exe windows x86
5ce1a6d336a66ccab3a772647c646ccb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetProcAddress
GetVersion
LocalFree
Sleep
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
InterlockedExchange
msvcrt
__p__commode
__wgetmainargs
_cexit
_exit
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
_XcptFilter
__setusermatherr
_amsg_exit
_initterm
memcpy
_wcmdln
exit
wcstoul
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 514B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE