Static task
static1
Behavioral task
behavioral1
Sample
961559bea8988b72807c8faa982e53ec971b71faffaf6269c4f94c9f2dff52cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
961559bea8988b72807c8faa982e53ec971b71faffaf6269c4f94c9f2dff52cd.exe
Resource
win10v2004-20220901-en
General
-
Target
961559bea8988b72807c8faa982e53ec971b71faffaf6269c4f94c9f2dff52cd
-
Size
9KB
-
MD5
a95fca0f4f6da47c6267449a8ef67026
-
SHA1
a9e220c1116efb15a830f89ffed47a2514015b1e
-
SHA256
961559bea8988b72807c8faa982e53ec971b71faffaf6269c4f94c9f2dff52cd
-
SHA512
67a3effae080be6f074413cd6468a614556d3ce1ff46f8e5fc5425858c2d6412d7e424a9388e0bcfbad6b371004e4b396a39de1f4b2b68385ead166a3353775a
-
SSDEEP
192:aKoeBwv+doS2deN3jEvKZtQxg2oMR6CkqDFFfF:areBqgoDMJQvcW6i9
Malware Config
Signatures
Files
-
961559bea8988b72807c8faa982e53ec971b71faffaf6269c4f94c9f2dff52cd.exe windows x86
2dc7de082d34f598d04c751dd0caf4c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreateSequential
kernel32
GetTickCount
IsDebuggerPresent
MoveFileExA
MultiByteToWideChar
CopyFileA
WinExec
GetPrivateProfileStringA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
ole32
CoCreateInstance
CoUninitialize
CoInitialize
msvcp80
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr80
_amsg_exit
_cexit
_exit
memset
exit
__initenv
_initterm
_initterm_e
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
sprintf
rename
??3@YAXPAX@Z
_configthreadlocale
__CxxFrameHandler3
__getmainargs
_XcptFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ