Static task
static1
Behavioral task
behavioral1
Sample
43f8f32b02fb2847558bf7c6c4a442f452e2c2cecc64fb3fad4c5e61ad73201c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43f8f32b02fb2847558bf7c6c4a442f452e2c2cecc64fb3fad4c5e61ad73201c.exe
Resource
win10v2004-20221111-en
General
-
Target
43f8f32b02fb2847558bf7c6c4a442f452e2c2cecc64fb3fad4c5e61ad73201c
-
Size
82KB
-
MD5
5a5090c25cafab319e4245912ac987fd
-
SHA1
6367475dac74ed3454a4f547830b6400dfe48e81
-
SHA256
43f8f32b02fb2847558bf7c6c4a442f452e2c2cecc64fb3fad4c5e61ad73201c
-
SHA512
3f061fa7ad910be92cf11bd62577c2fa400da1db813340df6ef15619cc5ebd7598233e2682ad1f1bd677e16bbd6cd1b289ae0f2f09c0c9cc9480c0efa3f65547
-
SSDEEP
768:omDgjcqS3a9qzs7IHlj6b3BpoEHtxBYMUDH/KqmhWO44ldk7FJvXMyfI0PRGYrzX:eLmDIy2bDoOt/A/KZhW/jtnR5zOkDB
Malware Config
Signatures
Files
-
43f8f32b02fb2847558bf7c6c4a442f452e2c2cecc64fb3fad4c5e61ad73201c.exe windows x86
70a4540474277fda89ca56998dcd7270
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wvsprintfW
CharToOemW
LoadStringW
netapi32
NetServerTransportEnum
NetServerEnum
NetServerGetInfo
NetApiBufferFree
kernel32
UnhandledExceptionFilter
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
GetOEMCP
GetACP
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
lstrcpynW
GetConsoleScreenBufferInfo
CreateFileW
SetThreadUILanguage
GetConsoleOutputCP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
SetLastError
WriteConsoleW
GetFileType
GetStdHandle
MultiByteToWideChar
GetModuleHandleW
FormatMessageW
ntdll
_wcslwr
memmove
_wcsnicmp
wcstol
wcsncpy
wcstoul
_ultoa
wcschr
RtlMultiByteToUnicodeN
sprintf
wcscat
wcscpy
wcslen
wcscmp
_snwprintf
_wcsicmp
_wcsupr
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsdup
wprintf
_wsetlocale
setlocale
free
malloc
fprintf
_iob
vfwprintf
vswprintf
fwprintf
printf
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ