Static task
static1
Behavioral task
behavioral1
Sample
c627020d23c650e1c4168960b27ab9f0eec80871ee7e8bf737bec7596117fc67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c627020d23c650e1c4168960b27ab9f0eec80871ee7e8bf737bec7596117fc67.exe
Resource
win10v2004-20220901-en
General
-
Target
c627020d23c650e1c4168960b27ab9f0eec80871ee7e8bf737bec7596117fc67
-
Size
338KB
-
MD5
4a389ec9406274d03d9a7b3aa2e787e3
-
SHA1
7e3f3fcb358752e609f5572d75bd6113a6f60ec2
-
SHA256
c627020d23c650e1c4168960b27ab9f0eec80871ee7e8bf737bec7596117fc67
-
SHA512
4cb25a38248a03c91a96f5a69f9ee6153e9c9c4f0c01bf8ee9832ecac6e744c7695396f949e687f0a9a077967cef36a3d1f0225204b51d5586d608f8559039cb
-
SSDEEP
6144:1H/5g9aMuem9vvWnp4LGaiJQKg1X9d2CYeEx5c8qHggkiF54MY:N6DqoeLGaaQKu7T4/qHKy59Y
Malware Config
Signatures
Files
-
c627020d23c650e1c4168960b27ab9f0eec80871ee7e8bf737bec7596117fc67.exe windows x86
814d25f52dd5e04569bebd748b045e38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetOEMCP
Sleep
ResetEvent
GetACP
WriteConsoleA
CreateFileW
GetCommandLineA
MultiByteToWideChar
GetDateFormatW
WideCharToMultiByte
InterlockedExchange
GetSystemTime
GetSystemInfo
ExitProcess
LocalFree
HeapDestroy
GetModuleHandleA
GetVersion
FormatMessageA
GetCurrentThreadId
GetCommandLineW
VirtualProtect
lstrcmpA
GetCurrentProcessId
HeapAlloc
CreateEventA
CreateThread
SetConsoleCP
GetSystemTimeAsFileTime
GetTickCount
SetStdHandle
advapi32
RegOpenKeyExW
OpenSCManagerW
RegDeleteValueW
msvcrt
_CxxThrowException
_amsg_exit
_wcsnicmp
memmove
__setusermatherr
gdi32
DeleteObject
user32
CreateWindowExA
GetMenuItemCount
SetFocus
CreatePopupMenu
InvalidateRect
lz32
LZClose
ole32
CoTestCancel
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE