Static task
static1
Behavioral task
behavioral1
Sample
0399bd992a125d37dde0e1a42b59a8f0d2c13f3909b0a40e2c5ceb36bcecf2a1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0399bd992a125d37dde0e1a42b59a8f0d2c13f3909b0a40e2c5ceb36bcecf2a1.exe
Resource
win10-20230220-en
General
-
Target
0399bd992a125d37dde0e1a42b59a8f0d2c13f3909b0a40e2c5ceb36bcecf2a1
-
Size
4.7MB
-
MD5
45739edbcf8b2edaefe1ee335d958f94
-
SHA1
f31ccfe34de37fe0668514236186c8902011c81d
-
SHA256
0399bd992a125d37dde0e1a42b59a8f0d2c13f3909b0a40e2c5ceb36bcecf2a1
-
SHA512
2001136cd39563cb620ddc616cde14e7c33433686bb6bd80e9d53b1c2e75f11453e9a2e16a4e25e3162310ce73c2c655d01ebf10dcea1708924502a9126f56d3
-
SSDEEP
98304:O6RNWyAEsR7UCjCCMTfucDmTKujryZ8kyWKqIs5luZNMXyo11+v+4MPZ66z24VZN:OiA77R7zCCHcSBI8/qh5luZIyK+vNmZX
Malware Config
Signatures
Files
-
0399bd992a125d37dde0e1a42b59a8f0d2c13f3909b0a40e2c5ceb36bcecf2a1.exe windows x64
96d5fa481b9a65c7095d2725e96f5ddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetClipboardData
advapi32
RegSetValueExA
Sections
.text Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rty40 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rty41 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rty42 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ