Static task
static1
Behavioral task
behavioral1
Sample
f79d9e36ba58f78590b6d76b6290e2228fdf5e8337c150f715306273318cd34a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f79d9e36ba58f78590b6d76b6290e2228fdf5e8337c150f715306273318cd34a.exe
Resource
win10v2004-20221111-en
General
-
Target
f79d9e36ba58f78590b6d76b6290e2228fdf5e8337c150f715306273318cd34a
-
Size
91KB
-
MD5
188aa8c2636eff8adac4a68cbe833670
-
SHA1
16b753f7e7e34d7c76e81e7cf253e6106429381d
-
SHA256
f79d9e36ba58f78590b6d76b6290e2228fdf5e8337c150f715306273318cd34a
-
SHA512
e3d6d9edb4c4549233682bd75716e1ce61b98f6f6a5a40ecced7977ce8809c209d2c2f900df8fec62b7e77b9200a7b367c82192c280b8aac004d2ad5c4b61912
-
SSDEEP
1536:IcYGDN2SybHVa8sgGc956uCzX/noGrnFuL+hUnRNRA0uRZw:OGh2XbHmNtBAGrthUnTuRZw
Malware Config
Signatures
Files
-
f79d9e36ba58f78590b6d76b6290e2228fdf5e8337c150f715306273318cd34a.exe windows x86
948e9763d3c23d2c5af3243d5a815aea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCurrentProcess
GetModuleHandleW
GetTickCount
GlobalAlloc
GetExitCodeProcess
ReadFile
GetModuleFileNameW
CreateFileW
GetSystemTime
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
msvcr90
__setusermatherr
_adjust_fdiv
_configthreadlocale
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ