Static task
static1
Behavioral task
behavioral1
Sample
b3345071eb64967f1461285c9d95ccf9c760c8999c6ef98d7814188046a2e550.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3345071eb64967f1461285c9d95ccf9c760c8999c6ef98d7814188046a2e550.exe
Resource
win10v2004-20221111-en
General
-
Target
b3345071eb64967f1461285c9d95ccf9c760c8999c6ef98d7814188046a2e550
-
Size
8KB
-
MD5
4d86d172fa6c7a10dbb5d51d59db765d
-
SHA1
dd0c85ee0c57056ecfc5a449f13b671ab6f62112
-
SHA256
b3345071eb64967f1461285c9d95ccf9c760c8999c6ef98d7814188046a2e550
-
SHA512
dd14fc1fc2015349cd1a9b6a6ff09af77032b1bee3f57e92351746bf3dd6fb8f29116bdfbd038f7cab206ded8ee31960353b8eb96b8933421357e1787b5f14d3
-
SSDEEP
48:SoFmlstbYAX3GrtsYApQz9X1UItnyGC15dUR3yqUOgl9W6Uc3H5jfD:36s3GrtsYApQzF9edAUB1UmjD
Malware Config
Signatures
Files
-
b3345071eb64967f1461285c9d95ccf9c760c8999c6ef98d7814188046a2e550.exe windows x86
58f707c6bd190dc3fb2ba22abcc5a554
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalHandle
lstrlenW
InterlockedFlushSList
GetProcAddress
DefineDosDeviceA
GetFileAttributesA
GetModuleHandleA
QueryMemoryResourceNotification
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
OpenProcess
CreateFileA
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
n Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
B Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
n Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
n Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BAs Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
OGa Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A8Y Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
22p Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cWE Size: 14KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UNV Size: 14KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ