Static task
static1
Behavioral task
behavioral1
Sample
c637c6ef8c7670f2e9a4ee9679debef595f0ae14328247129952c650f8bee757.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c637c6ef8c7670f2e9a4ee9679debef595f0ae14328247129952c650f8bee757.exe
Resource
win10v2004-20220812-en
General
-
Target
c637c6ef8c7670f2e9a4ee9679debef595f0ae14328247129952c650f8bee757
-
Size
402KB
-
MD5
8d64db0d7528024cb184ebd615c76773
-
SHA1
27034a4c091703c984f8ae5a994b165255cf5882
-
SHA256
c637c6ef8c7670f2e9a4ee9679debef595f0ae14328247129952c650f8bee757
-
SHA512
a24463b9b0e57ff888bd5ecb021c553f1c8ab22fc343246531d77ec866b64544661da54212dc86b70c847365e1aa178094280c33a90c9582316619c70bee4962
-
SSDEEP
12288:FXZV+I3Cw/9QWNx4WIxHxLczlAVNzDt3/z:Rqs9PNyvxyzC
Malware Config
Signatures
Files
-
c637c6ef8c7670f2e9a4ee9679debef595f0ae14328247129952c650f8bee757.exe windows x86
3bca92903238af25761d6e50a6fc0291
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
SetComputerNameA
lstrcpyA
VirtualBufferExceptionHandler
WaitNamedPipeA
GlobalFlags
CreateFiber
VirtualProtect
SetPriorityClass
SetSystemPowerState
DuplicateConsoleHandle
ReadConsoleOutputCharacterA
GetConsoleCharType
GetCommConfig
SetCalendarInfoW
SetConsoleOutputCP
GetCommandLineA
HeapUsage
advapi32
WmiMofEnumerateResourcesW
StartServiceA
I_ScPnPGetServiceName
CreateRestrictedToken
LsaClearAuditLog
Sections
.text Size: 394KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 802B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 274KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE