?SetupReference@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
63e183bb60bf36501856dc0cda045367f740b433296c735b5c842a149526af36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63e183bb60bf36501856dc0cda045367f740b433296c735b5c842a149526af36.exe
Resource
win10v2004-20220812-en
General
-
Target
63e183bb60bf36501856dc0cda045367f740b433296c735b5c842a149526af36
-
Size
133KB
-
MD5
6bf416378387b732653c7f8283836dab
-
SHA1
06751577e6caf124bce00d57e74ad07181418a68
-
SHA256
63e183bb60bf36501856dc0cda045367f740b433296c735b5c842a149526af36
-
SHA512
77fdcbd298cc27fd742b3f049c76ecc0165ac1bde9a81638956e48c786bcddb756bd0cdbad5eabec6cc29820a3f0300534690611c65a9f6b9a263f87c8e1ba6e
-
SSDEEP
3072:mxy0Q1l5iCPSKj9nRtoFY33iQf1I0cXEwNpzo9MoFrU:mxEiDOyG3iC1Ix/zo9fr
Malware Config
Signatures
Files
-
63e183bb60bf36501856dc0cda045367f740b433296c735b5c842a149526af36.exe windows x86
3884b90b28519d576cfcf9865cfe8511
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord29
PathCompactPathExW
kernel32
lstrlenA
LoadLibraryExW
lstrlenW
GetModuleHandleW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.piano Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ