Static task
static1
Behavioral task
behavioral1
Sample
c63430a93d64994261b557721dcd9b8269684e8a30cc0f4e2e5d8235f1f1cafd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c63430a93d64994261b557721dcd9b8269684e8a30cc0f4e2e5d8235f1f1cafd.exe
Resource
win10v2004-20220812-en
General
-
Target
c63430a93d64994261b557721dcd9b8269684e8a30cc0f4e2e5d8235f1f1cafd
-
Size
135KB
-
MD5
bfc8e0202488ade2eef56f2998dccf41
-
SHA1
5a586986cb6a8a9d81b51f1a136e2d095249a952
-
SHA256
c63430a93d64994261b557721dcd9b8269684e8a30cc0f4e2e5d8235f1f1cafd
-
SHA512
e348285419ca14fd92bea95f68eccd3d8d15ce0cfeb77e032cd04c08419731ea48743801d5b4df9edf02aaac9f288813def6e393c2f949863c6102c86c56a77a
-
SSDEEP
3072:m+Kln9FoqTvJ36h0eAOotlaGZcmxYEAZTAGjwEg06Vjv:XKlvLJ36SZ1WIawEg06
Malware Config
Signatures
Files
-
c63430a93d64994261b557721dcd9b8269684e8a30cc0f4e2e5d8235f1f1cafd.exe windows x86
071727224fc533c1096fdda0558e9121
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
CommandLineToArgvW
sensapi
IsNetworkAlive
crypt32
CertEnumSystemStoreLocation
CryptMsgGetParam
ole32
CoUninitialize
CoInitialize
kernel32
CancelWaitableTimer
SetLastError
GetTickCount
CloseHandle
ProcessIdToSessionId
TerminateProcess
GetCurrentProcessId
LocalAlloc
QueryPerformanceCounter
ExitProcess
GetCurrentThread
GetLastError
GetCurrentThreadId
GetCurrentProcess
GetCommandLineW
LocalFree
GetStartupInfoA
GetModuleHandleA
netapi32
NetApiBufferFree
NetUserModalsGet
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ