Static task
static1
Behavioral task
behavioral1
Sample
1573fc0619c91432a7673f514771f0720b40499a7375997fc69e3c1f7ed0f127.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1573fc0619c91432a7673f514771f0720b40499a7375997fc69e3c1f7ed0f127.exe
Resource
win10v2004-20221111-en
General
-
Target
1573fc0619c91432a7673f514771f0720b40499a7375997fc69e3c1f7ed0f127
-
Size
22KB
-
MD5
726ea88ce3cea1bbc73bb13eef3dc870
-
SHA1
b5e13da35703b5f46e4e139175fb03f977573431
-
SHA256
1573fc0619c91432a7673f514771f0720b40499a7375997fc69e3c1f7ed0f127
-
SHA512
664e4961d7c62c31174bd6cf501c71311c9466e486edaf5a019e7071947c5cd14c10258b650f125e94cc79beae022eb15afd3f397a466810a94e5d643d409867
-
SSDEEP
384:za0i7EoSxMTJs6Nssssssss/2OZiJm9r9D2aLMtvLq3gYFzfgMfiOtc0OzEs23J+:zU7EoSxkvZiJmZBJStAs2
Malware Config
Signatures
Files
-
1573fc0619c91432a7673f514771f0720b40499a7375997fc69e3c1f7ed0f127.exe windows x86
df4aff3bed5eefc61b6abdd87e6db7a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
bugrpt
BR_Send
BR_UserInit
BR_SetSvrIP
BR_SetSvrAckHandler
kernel32
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
shell32
CommandLineToArgvW
msvcp80
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr80
__setusermatherr
_adjust_fdiv
__p__commode
_ismbblead
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
_configthreadlocale
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
??3@YAXPAX@Z
_initterm_e
_initterm
_acmdln
__dllonexit
exit
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ