Static task
static1
Behavioral task
behavioral1
Sample
057d73b1b7088f8ef4da7b2a962df13033548172c8462f6b47ba02411e49123b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
057d73b1b7088f8ef4da7b2a962df13033548172c8462f6b47ba02411e49123b.exe
Resource
win10v2004-20220901-en
General
-
Target
057d73b1b7088f8ef4da7b2a962df13033548172c8462f6b47ba02411e49123b
-
Size
165KB
-
MD5
fa2da027ddbac8da4a67e8eed6c2f7e8
-
SHA1
0a905924643a0c1feefc24025fa6207a4d6e6a3e
-
SHA256
057d73b1b7088f8ef4da7b2a962df13033548172c8462f6b47ba02411e49123b
-
SHA512
85527a5fcf4aa0d5e27a35234ef31eaa26d3c712fced53ede795f0fe091318cd90e92ae501e66e8dff74e07293d72c6068b92651d0c3a5496541f76a2d27f185
-
SSDEEP
3072:n0pcyaVS96JXvej4GqUgDlNY/dgzRHigG+CpsR9K2gxcoKkn1M:m6yGej4GfgSdgJ1EiLyq2M
Malware Config
Signatures
Files
-
057d73b1b7088f8ef4da7b2a962df13033548172c8462f6b47ba02411e49123b.exe windows x86
af45ac250bed97c5db2c0302fb257486
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
msvcp90
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
msvcr90
_XcptFilter
_ismbblead
exit
_acmdln
_exit
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_cexit
__getmainargs
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
isupper
isalpha
_invalid_parameter_noinfo
tolower
_initterm
_amsg_exit
__CxxFrameHandler3
memcpy
memset
_CxxThrowException
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE