Static task
static1
Behavioral task
behavioral1
Sample
65729f2ce903173752053f767bdf88e446c41298adf415f88603a492402543c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65729f2ce903173752053f767bdf88e446c41298adf415f88603a492402543c6.exe
Resource
win10v2004-20220812-en
General
-
Target
65729f2ce903173752053f767bdf88e446c41298adf415f88603a492402543c6
-
Size
60KB
-
MD5
da868c1673a71abb9816190eee98394a
-
SHA1
33e150eb8c4f56717b483955bca118270c418dd3
-
SHA256
65729f2ce903173752053f767bdf88e446c41298adf415f88603a492402543c6
-
SHA512
88558b53834940acd26581f2bee493e62500c3707398b0842136fbc46f3b758a16563cbecda1abc389b431945710f51fa6906edb66e438ee174b1b6c18192024
-
SSDEEP
768:FdZKwQ/Gul85VKA8vGbNL8A3YWcLFKNmqIRnLtSRX3oUY3Kmb:kw5l8vIl3YWcxVpC3oUY3Kmb
Malware Config
Signatures
Files
-
65729f2ce903173752053f767bdf88e446c41298adf415f88603a492402543c6.exe windows x86
5f26291bd16c66bcb60c91e65d27c029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetConsoleWindow
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
FlushFileBuffers
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
MultiByteToWideChar
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
SetStdHandle
user32
LoadIconA
SendMessageA
ws2_32
WSAStartup
closesocket
inet_addr
socket
WSAGetLastError
WSACleanup
htons
connect
send
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ