Static task
static1
Behavioral task
behavioral1
Sample
f62b6c4fa1f5cd5395f7280bcddd086152d13b289aa0487987a4de3675498b1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f62b6c4fa1f5cd5395f7280bcddd086152d13b289aa0487987a4de3675498b1c.exe
Resource
win10v2004-20220812-en
General
-
Target
f62b6c4fa1f5cd5395f7280bcddd086152d13b289aa0487987a4de3675498b1c
-
Size
42KB
-
MD5
534423cbd516bce9c200703021522e70
-
SHA1
b1733e96db9b3deb5d011cb737d6e9931b79abae
-
SHA256
f62b6c4fa1f5cd5395f7280bcddd086152d13b289aa0487987a4de3675498b1c
-
SHA512
d1f88fc78928667cb51eb408eab7ff88b5345bcde47c8c1535a2e1c465ee8685d60a013b5f149ddfd81fa39a39cbdf805e8bc09901801c8c6b7229cf0781b1f5
-
SSDEEP
768:PBenigPxfC/S7g8Ji2QGPL4vzZq2o9W7GsxBbPr:ZSfJg8JitGCq2iW7z
Malware Config
Signatures
Files
-
f62b6c4fa1f5cd5395f7280bcddd086152d13b289aa0487987a4de3675498b1c.exe windows x86
870d997f7b332923088af3ad4e3f31ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMessageA
CreateWindowExA
DispatchMessageA
FindWindowA
RegisterClassA
LoadIconA
LoadCursorA
richwn32
ord100
kernel32
GetEnvironmentStrings
GetEnvironmentStringsW
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringA
HeapAlloc
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetStdHandle
GetFileType
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
WriteFile
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapFree
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�$��u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE