Static task
static1
Behavioral task
behavioral1
Sample
2e58f23422076cc03f492c0c9ca6ce14.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e58f23422076cc03f492c0c9ca6ce14.exe
Resource
win10v2004-20220812-en
General
-
Target
2e58f23422076cc03f492c0c9ca6ce14.exe
-
Size
349KB
-
MD5
2e58f23422076cc03f492c0c9ca6ce14
-
SHA1
883c51ea2768488cbdabfb5969349c8d41072c36
-
SHA256
d3308f8b8905c046fa48a7a828b1047511709ad9c7d9b7d4e67ec94083e76c39
-
SHA512
27208c19cf0c540877230cc97834348cf11465b0fc1e751576cbc70cb9469ac01b7835ed30afd06468665461c447afc375c5210158782ea16fcb5aaf9975194f
-
SSDEEP
3072:wy0dtAPkwNGAW7gImQdqUKct8lduUNLpiLhFj9B1OGS8tB39W6t+6LvELqTTV+nL:wjfO9Gn9icSduUNEj1p39bLcLgnTBk
Malware Config
Signatures
Files
-
2e58f23422076cc03f492c0c9ca6ce14.exe.exe windows x86
450061a96b7a5a44c3e691e2ad07f2b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleW
GetProcAddress
LoadResource
SizeofResource
LoadLibraryA
FindResourceA
GetModuleHandleExW
FreeLibrary
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
msvcrt
__getmainargs
_msize
_XcptFilter
__set_app_type
_acmdln
_errno
?_set_new_mode@@YAHH@Z
?terminate@@YAXXZ
realloc
strcpy_s
_controlfp_s
__p__commode
_set_fmode
_initterm_e
_initterm
free
malloc
_callnewh
rand
_except_handler4_common
memset
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
_ismbblead
_amsg_exit
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 321KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ