Static task
static1
Behavioral task
behavioral1
Sample
f64fe38037223cd85a3ec0f42ac3fc7815652006139600c290f84ff261e20913.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f64fe38037223cd85a3ec0f42ac3fc7815652006139600c290f84ff261e20913.exe
Resource
win10v2004-20220901-en
General
-
Target
f64fe38037223cd85a3ec0f42ac3fc7815652006139600c290f84ff261e20913
-
Size
225KB
-
MD5
66548bb31889b1e86f64cdb44f4156b0
-
SHA1
3e9f67f5a3c895c38c4040655d207451ef05a645
-
SHA256
f64fe38037223cd85a3ec0f42ac3fc7815652006139600c290f84ff261e20913
-
SHA512
435e874ebe5d024a1c83e97bd2873a3cd29ba5c9fca534da0567005ea312f85116a2e9d7b5579a9ca8cf63eb375363d91388f2d776a497f986bbb9fe8d7813b9
-
SSDEEP
3072:ePFloirNfhgrUAELPV6wGhcdNSq29/7DvDKEyD0mxSYF6Gm:WOixyrFELPqCNSqYTDvDKZtxSm6Gm
Malware Config
Signatures
Files
-
f64fe38037223cd85a3ec0f42ac3fc7815652006139600c290f84ff261e20913.exe windows x86
6515525c36d72ae1cbd617db9eb974f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
GetStdHandle
LoadResource
GetSystemInfo
GetProcAddress
FindResourceA
GetTickCount
LoadLibraryA
GetModuleFileNameA
WaitForSingleObject
CreateThread
user32
MessageBoxA
CharLowerA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 542B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE