Static task
static1
Behavioral task
behavioral1
Sample
f4e158fbf58f81fc60df47d4221030e13ec572dbeec3351a016f54d4e7a2863f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f4e158fbf58f81fc60df47d4221030e13ec572dbeec3351a016f54d4e7a2863f.exe
Resource
win10v2004-20230220-en
General
-
Target
f4e158fbf58f81fc60df47d4221030e13ec572dbeec3351a016f54d4e7a2863f
-
Size
98KB
-
MD5
18b771e2bc0db884798e966b94f7a285
-
SHA1
7349a8ea7f2b0bfe112c5f17c82425a49e52459e
-
SHA256
f4e158fbf58f81fc60df47d4221030e13ec572dbeec3351a016f54d4e7a2863f
-
SHA512
a2677285800e4c4c78b150b198e742f007d0ff7366edd251a95285b25c97d96d5f7f1e5cb93b686c889bd39a5d529427f72304cd56c6bcd0ede59d55777c86be
-
SSDEEP
768:6IxbnzNEr1FLzgwgtiMK2/XGpWaFct1ryGq7ZWYpaNhOToh1bZ:6eVEstaYfCct1rHq7ZWYp0KS
Malware Config
Signatures
Files
-
f4e158fbf58f81fc60df47d4221030e13ec572dbeec3351a016f54d4e7a2863f.exe windows x86
b82c7aeb7fe3af66477ebdc120d78566
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp120d
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Debug_message@std@@YAXPB_W0I@Z
kernel32
GetModuleHandleW
GetProcAddress
LoadLibraryExW
MultiByteToWideChar
WideCharToMultiByte
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualQuery
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
EncodePointer
user32
LoadAcceleratorsW
LoadIconW
LoadCursorW
EndPaint
BeginPaint
UpdateWindow
EndDialog
DialogBoxParamW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
UnregisterClassW
TranslateAcceleratorW
msvcr120d
__wgetmainargs
_wsplitpath_s
_wmakepath_s
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
free
malloc
memcpy
memset
strlen
memmove
wcscpy_s
__crtTerminateProcess
swprintf_s
_vsnwprintf_s
_vscwprintf
_hypot
_CrtDbgReportW
_CxxThrowException
__CxxFrameHandler3
_recalloc
memmove_s
_lock
_unlock
_calloc_dbg
__dllonexit
_onexit
_CRT_RTC_INITW
??1type_info@@UAE@XZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
wcslen
__set_app_type
_CrtSetCheckCount
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ