Static task
static1
Behavioral task
behavioral1
Sample
23ef31386a037f7606b826f99b80908799b1d4e87a2f67573e68c87f8da5fbb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23ef31386a037f7606b826f99b80908799b1d4e87a2f67573e68c87f8da5fbb6.exe
Resource
win10v2004-20220812-en
General
-
Target
23ef31386a037f7606b826f99b80908799b1d4e87a2f67573e68c87f8da5fbb6
-
Size
144KB
-
MD5
63ab4a8fb6f7ea2c9d8282fe7101c6e7
-
SHA1
6d58e884b4f70c5fd8d2597a27f2ea7cad87ab42
-
SHA256
23ef31386a037f7606b826f99b80908799b1d4e87a2f67573e68c87f8da5fbb6
-
SHA512
5cd73573e04329ffc41c254bf2a8e99b18e300709ef176fab20ae8b7db5106508228511f68ac943a884af8bc6c1127dd7aba7992b62bf9fcd57194bf15948bb5
-
SSDEEP
1536:jCMZkOE/lKE2UA6Ts/DIKREw0zyIKREw0zHSyGCFW7z:WROEt4UNTs/cWEweWEw6lGC2
Malware Config
Signatures
Files
-
23ef31386a037f7606b826f99b80908799b1d4e87a2f67573e68c87f8da5fbb6.exe windows x86
fb5b3cb10e50e874f7363e167d77193b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
GetCurrentDirectoryW
GlobalFree
GetFullPathNameW
GetCommandLineW
lstrlenA
MultiByteToWideChar
GetLastError
lstrlenW
LocalAlloc
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
GetVersionExW
GetOEMCP
GetCPInfo
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
LCMapStringW
SetFilePointer
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
CloseHandle
lstrcmpiW
GetProcAddress
GetModuleHandleW
GetACP
user32
TranslateAcceleratorW
GetMessageW
TranslateMessage
LoadStringW
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
GetSystemMetrics
DefWindowProcW
PostQuitMessage
LoadAcceleratorsW
CreateWindowExW
ShowWindow
UpdateWindow
DestroyWindow
setupapi
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
shell32
CommandLineToArgvW
difxapi
DriverPackageUninstallW
DriverPackageInstallW
DriverPackagePreinstallW
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Xj^��u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE