Static task
static1
Behavioral task
behavioral1
Sample
c62ff907d7a8fb9bfb76f2268dab27cc75a18b6cffb7a8a61bfb48ec9556549f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c62ff907d7a8fb9bfb76f2268dab27cc75a18b6cffb7a8a61bfb48ec9556549f.exe
Resource
win10v2004-20220812-en
General
-
Target
c62ff907d7a8fb9bfb76f2268dab27cc75a18b6cffb7a8a61bfb48ec9556549f
-
Size
50KB
-
MD5
8bb035242c2419ad6d3f0a01b0e51ef6
-
SHA1
5ada3302482e32bd84c2341cbaaf9824df9758a2
-
SHA256
c62ff907d7a8fb9bfb76f2268dab27cc75a18b6cffb7a8a61bfb48ec9556549f
-
SHA512
756b673a62f1560976380beddfe9bbff19743fd22081237216e33470ae8caa8c6b43e77738e868e39029bfab71588b9080c1cf44fb5bacd001dc9e825d3f006f
-
SSDEEP
768:U2BEcLhfnQaFByXS5Yt/Yfji3hjSqkJII4OECWsR6W1B9dFDmyOCv2:1WEhQaFb8/oqu13EZsR6wBNSy+
Malware Config
Signatures
Files
-
c62ff907d7a8fb9bfb76f2268dab27cc75a18b6cffb7a8a61bfb48ec9556549f.exe windows x86
3bf32caee6e34d7b635c8c94ddc6ab9a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateFileA
CreateThread
CreateToolhelp32Snapshot
DeviceIoControl
EnumSystemLocalesA
ExitProcess
ExpandEnvironmentStringsA
FindClose
FlushFileBuffers
FreeLibrary
GetACP
GetCommandLineA
GetConsoleCP
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesA
GetFullPathNameA
GetLastError
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTickCount
GetVersion
GetVersionExA
GlobalHandle
GlobalLock
HeapAlloc
HeapFree
InterlockedIncrement
IsBadCodePtr
LeaveCriticalSection
LoadLibraryExA
Module32Next
MoveFileA
OpenEventA
QueryPerformanceCounter
RemoveDirectoryA
SetFileTime
SetPriorityClass
Sleep
SystemTimeToFileTime
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
lstrcatA
lstrcmpiA
lstrcpyA
user32
DrawTextA
GetClientRect
UnhookWindowsHookEx
advapi32
LockServiceDatabase
OpenSCManagerA
UnlockServiceDatabase
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ