Static task
static1
Behavioral task
behavioral1
Sample
64d194bedd16ebc2263c88c233b8c231c70394afe80c7e2b69130cf932d802af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64d194bedd16ebc2263c88c233b8c231c70394afe80c7e2b69130cf932d802af.exe
Resource
win10v2004-20220901-en
General
-
Target
64d194bedd16ebc2263c88c233b8c231c70394afe80c7e2b69130cf932d802af
-
Size
298KB
-
MD5
4b2145485e43bb3ac77e1e2e45c40100
-
SHA1
e7c479be4abdd104f38df45ce94846a2be686f9a
-
SHA256
64d194bedd16ebc2263c88c233b8c231c70394afe80c7e2b69130cf932d802af
-
SHA512
e1f4261cfcc65772e78abd63f96d256485422490b5c3dffcf4547879cfc148da66845a377a611ddb099a5c7d61d3c7bb1aba6a8fe9e27fa9d13bfad5554bddb3
-
SSDEEP
3072:wLpe71PX/omWqLEnCYvcvIXRTy1hmUI0xlOcwSIvS3oGcFuG9hFoHk148GzMwxpP:8cXwvDx8hzNxl8SIvSiFxTO8GzMa
Malware Config
Signatures
Files
-
64d194bedd16ebc2263c88c233b8c231c70394afe80c7e2b69130cf932d802af.exe windows x86
1c401b959f744f1e1cb48e5faacfced2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ