Static task
static1
Behavioral task
behavioral1
Sample
57fab0f527938e1aa2e2b95d88884e8f5dcadb85b608efd521c559c0dfb67bfa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
57fab0f527938e1aa2e2b95d88884e8f5dcadb85b608efd521c559c0dfb67bfa.exe
Resource
win10v2004-20220812-en
General
-
Target
57fab0f527938e1aa2e2b95d88884e8f5dcadb85b608efd521c559c0dfb67bfa
-
Size
76KB
-
MD5
6e59d0ca7bf3980b788d5a6c79293c8d
-
SHA1
bc630d610c34ba796ccb08bade7619d4d86bd03c
-
SHA256
57fab0f527938e1aa2e2b95d88884e8f5dcadb85b608efd521c559c0dfb67bfa
-
SHA512
3d9d2f012a58dc8d6cfc4bd7ca89c01c462ce0898aea0f102d76bfd26fb3fea962a4b7e1191e9662db483e043aa492f988f2f2bb15eda1c6ccf44897bce03d6d
-
SSDEEP
1536:4xaDSLlw4XedIIouFVbJehY0KJOCbZUIJNpjVrs2ryrd1vUQuq6:nSL7uayVbETCdHNHs2qo
Malware Config
Signatures
Files
-
57fab0f527938e1aa2e2b95d88884e8f5dcadb85b608efd521c559c0dfb67bfa.exe windows x86
9ee08a1bf2856352e7e4e76335c54ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommProperties
GetStartupInfoW
DeleteTimerQueueEx
RegisterConsoleVDM
MapViewOfFile
WriteProcessMemory
QueryActCtxW
lstrcatW
OpenFile
RtlFillMemory
SystemTimeToFileTime
BaseCleanupAppcompatCacheSupport
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE