Static task
static1
Behavioral task
behavioral1
Sample
650c434bf55fb312682989e9949c9447c8c1d2b7f36bdd1da14ca89f9fadd7e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
650c434bf55fb312682989e9949c9447c8c1d2b7f36bdd1da14ca89f9fadd7e6.exe
Resource
win10v2004-20220901-en
General
-
Target
650c434bf55fb312682989e9949c9447c8c1d2b7f36bdd1da14ca89f9fadd7e6
-
Size
138KB
-
MD5
6c1c973a00e5b3dbb69b7b0d0e30a2c0
-
SHA1
09979c5ca858587fc84174374c35baa20d3b8ad3
-
SHA256
650c434bf55fb312682989e9949c9447c8c1d2b7f36bdd1da14ca89f9fadd7e6
-
SHA512
c65526d2f73c7d5062539ae99830b928b5356a12ba5396b7e9cf144deb5dc043e15ee429564e216d319120cc5cfdce4a1aafd42f7556101770744d03959b5723
-
SSDEEP
3072:p5FeBleNP8ucWIbTrUOIi8os4/pwSE46tFvmHYerwrNZ0C7:PPoTQZi8o/64bYerwrNr7
Malware Config
Signatures
Files
-
650c434bf55fb312682989e9949c9447c8c1d2b7f36bdd1da14ca89f9fadd7e6.exe windows x86
e4207e9b7c6f0ea3333d4fedaad46b08
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfoExW
FoldStringA
EnumUILanguagesW
DefineDosDeviceA
EnumSystemLanguageGroupsA
WaitForSingleObject
CancelWaitableTimer
GlobalAddAtomA
LockFileEx
OpenSemaphoreA
lstrcmpiA
GetFileType
GetPrivateProfileSectionNamesW
SwitchToThread
GetComputerNameW
MapViewOfFile
EnumCalendarInfoW
GetUserDefaultLCID
GetFileAttributesExW
SetPriorityClass
VerSetConditionMask
Thread32First
QueueUserWorkItem
FindVolumeMountPointClose
CreateHardLinkA
_lread
GetFileInformationByHandle
GlobalUnWire
GetSystemDefaultLCID
PeekNamedPipe
FindNextVolumeMountPointW
SetCalendarInfoA
LocalShrink
DebugBreak
GetDateFormatA
GlobalMemoryStatus
user32
GetInputState
SetFocus
TranslateMDISysAccel
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE