Static task
static1
Behavioral task
behavioral1
Sample
062e63e8267f04cdb8bd440a18b7e8b2029364472fd762f59d2ff8d66e32510d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
062e63e8267f04cdb8bd440a18b7e8b2029364472fd762f59d2ff8d66e32510d.exe
Resource
win10v2004-20220812-en
General
-
Target
062e63e8267f04cdb8bd440a18b7e8b2029364472fd762f59d2ff8d66e32510d
-
Size
262KB
-
MD5
605171b8bdc1a494ab7b3477aee6fff0
-
SHA1
d203c07c245bbcdf202462b77fb13e121d77949a
-
SHA256
062e63e8267f04cdb8bd440a18b7e8b2029364472fd762f59d2ff8d66e32510d
-
SHA512
2f20c2a1d47768086a8d4782f8d107f40bb82bc17341e0a28778f62d3b79b4766be066eae136586740d4d508581368a809264d03b17664e60aaca17e8c743bb8
-
SSDEEP
3072:Ck7Qj9GvpNZfyDjEBpD66VEC0+Ht8GRyXsCKVwN3wFqdn0+0ABL6vbn:lhvBZ6/C0UEcCKVwtwM90ABI
Malware Config
Signatures
Files
-
062e63e8267f04cdb8bd440a18b7e8b2029364472fd762f59d2ff8d66e32510d.exe windows x86
664dfe2793c686ec4083b5793bd23f5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetCommandLineA
InitializeCriticalSection
LoadLibraryW
Sleep
FreeConsole
LeaveCriticalSection
ReadFile
GetModuleFileNameW
CreateFileW
GetStdHandle
GetLastError
SetLastError
GetProcAddress
EnterCriticalSection
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
CloseHandle
GetCurrentProcessId
GetVolumeInformationW
ExitProcess
GlobalAlloc
GetTempPathA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
ReadConsoleW
GetModuleHandleW
InterlockedCompareExchange
WaitForSingleObject
GetModuleHandleExW
FreeLibrary
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetCPInfo
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LCMapStringW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCurrentThreadId
AreFileApisANSI
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
GetFileType
SetFilePointerEx
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
VirtualQuery
user32
MessageBoxW
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ