?SETRESULT@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
31dbf015a3a27b4bb3c2950d93bbbf1f2c037a5970a8446c3201fc7182f75658.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31dbf015a3a27b4bb3c2950d93bbbf1f2c037a5970a8446c3201fc7182f75658.exe
Resource
win10v2004-20220812-en
General
-
Target
31dbf015a3a27b4bb3c2950d93bbbf1f2c037a5970a8446c3201fc7182f75658
-
Size
88KB
-
MD5
cb33fc1f84817aeecce91187ac01f3bc
-
SHA1
890d8b13c0b592a7705a1131809fd03094ee184e
-
SHA256
31dbf015a3a27b4bb3c2950d93bbbf1f2c037a5970a8446c3201fc7182f75658
-
SHA512
0fe67d3ec5b6284620b460489c385be67a5d2851a898c8294043459e3fdef90404b1cf32218052ae039ffb015b565c46bd8d615994899aafb3a6027bea93affa
-
SSDEEP
1536:s2OUbZg3eOMf4et0p+e85tVkh9oxydm6UWU+EnX:s2jb8eOO4l+TthxaURX
Malware Config
Signatures
Files
-
31dbf015a3a27b4bb3c2950d93bbbf1f2c037a5970a8446c3201fc7182f75658.exe windows x86
bfb5e69607dedc241d611b30b797b7fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
DeleteFileW
GetModuleHandleA
WriteFile
VirtualFree
GetThreadPriority
GetProcAddress
VirtualAlloc
CloseHandle
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
ExitProcess
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
user32
LoadBitmapA
LoadIconA
ws2_32
recv
closesocket
select
winscard
SCardCancel
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT3 Size: 4KB - Virtual size: 18B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 4KB - Virtual size: 413B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ