Static task
static1
Behavioral task
behavioral1
Sample
HAL104Result.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
HAL104Result.exe
Resource
win10v2004-20221111-en
General
-
Target
HAL104Result.exe
-
Size
8KB
-
MD5
e2953a32d41ce657cee8c37dffd32628
-
SHA1
5b77970ca9d57c52f13759fcaf6111f0f4ecab41
-
SHA256
651ec40182072e7c2953da50e3876f14752c7d6bfcbac64c4c1d688bdf8cbeec
-
SHA512
660ea970bf7fd11b4546c5932949e607c79c2f4b5414a7e953bab8e3079be045ecdd854cb5e49d0441060114d46c0d291e77a8ed00af123623bcf8e067974eca
-
SSDEEP
96:5agjcGdU/zn/IsxUq8dN8EDJOZjV+fpiJaUlYFJJGI+RqEyC7tCEc7uT:pk/zn/PE8HZjV+fMJxYFJJ9EqEPc7M
Malware Config
Signatures
Files
-
HAL104Result.exe.exe windows x86
4794b2bf4de72e193e23e3f1292d0880
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
SetFilePointer
WriteFile
ReadFile
LockFile
UnlockFile
CloseHandle
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
shell32
ShellExecuteA
msvcr90
_configthreadlocale
__setusermatherr
_adjust_fdiv
_initterm_e
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_getch
printf
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ