Static task
static1
Behavioral task
behavioral1
Sample
c39e05b6400bbde568ce645fedec4399f0348f3096db9f5cb9a38a7062547119.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c39e05b6400bbde568ce645fedec4399f0348f3096db9f5cb9a38a7062547119.exe
Resource
win10v2004-20221111-en
General
-
Target
c39e05b6400bbde568ce645fedec4399f0348f3096db9f5cb9a38a7062547119
-
Size
146KB
-
MD5
bea7d3ab6b013d4468c3fd8313c1feab
-
SHA1
f18d104915eabba8b0f417494a759b9450985ad6
-
SHA256
c39e05b6400bbde568ce645fedec4399f0348f3096db9f5cb9a38a7062547119
-
SHA512
d3c00e822976c0b5562ea6c67d216f0084ee5dfff84c756dee67471f012285ae521d07b007ca1962d4cb2a5205d634ca6c53255a6b70ac5212ca2c555d4d4b46
-
SSDEEP
3072:urukPigBZrsHX873WL/1EPKnAdvqeoPm0z:MdbBZrH7S/ihxWrz
Malware Config
Signatures
Files
-
c39e05b6400bbde568ce645fedec4399f0348f3096db9f5cb9a38a7062547119.exe windows x86
44ad6918c3ad9c82ba2fe26f8ef4f2e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumDisplaySettingsW
clusapi
CloseCluster
kernel32
ReplaceFileW
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStartupInfoW
GetProcessId
GetTickCount
TerminateProcess
IsDebuggerPresent
EnumResourceTypesA
InterlockedCompareExchange
ExitProcess
QueryPerformanceCounter
UnhandledExceptionFilter
InterlockedExchange
Sleep
GetCurrentThreadId
GetCurrentProcess
comctl32
InitCommonControlsEx
advapi32
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ