Static task
static1
Behavioral task
behavioral1
Sample
062b7ae5779d0f2d6991a183c610850cc3d6f4ef9576e0391c2176343bb604fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
062b7ae5779d0f2d6991a183c610850cc3d6f4ef9576e0391c2176343bb604fb.exe
Resource
win10v2004-20220812-en
General
-
Target
062b7ae5779d0f2d6991a183c610850cc3d6f4ef9576e0391c2176343bb604fb
-
Size
4.8MB
-
MD5
6749b4793b62246ed9d4fa01ff7d34ba
-
SHA1
d12dcfb581d651318d00cdc4889b67f037a83af9
-
SHA256
062b7ae5779d0f2d6991a183c610850cc3d6f4ef9576e0391c2176343bb604fb
-
SHA512
86313b3aa4153819e792ebd6ae8622395dcee27f68bfc52f00f83b7ffcc735fdd94855ada41f1c013707548a9b05a16ff11ecb6229bb9ffeeba98feb366fda23
-
SSDEEP
98304:Qe19Yt/LX5H5a7YTmAPRzl1Ya7YkasNkSG5LKhNM5gOIxaaB:b9gX5ZnTvPR7UyNkSG5oNM5gpx
Malware Config
Signatures
Files
-
062b7ae5779d0f2d6991a183c610850cc3d6f4ef9576e0391c2176343bb604fb.exe windows x86
0ccd86409c28d4c31b3cc85cff52aff6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetCurrentThreadId
GetVersionExA
CloseHandle
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
GetModuleHandleA
GetFullPathNameW
CreateMutexW
GetModuleFileNameW
GetEnvironmentVariableW
GetFileSize
FindFirstFileW
MoveFileExW
GetCurrentProcess
GetModuleHandleExW
CreateDirectoryW
InterlockedCompareExchange
GetModuleHandleW
SetFileTime
WriteFile
GetCommandLineA
GetSystemDirectoryW
LoadLibraryW
FreeConsole
EnterCriticalSection
GetFileAttributesW
ReadFile
CreateFileW
lstrlenW
GetTempPathW
GetStdHandle
GetLastError
GetLongPathNameW
SetLastError
GetProcAddress
FindClose
GetModuleFileNameA
GetFileAttributesExW
GetShortPathNameW
DeleteFileW
GetCurrentProcessId
LocalFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
FindResourceW
LoadResource
SizeofResource
LockResource
LeaveCriticalSection
Sleep
InitializeCriticalSection
GetUserDefaultLangID
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
CreateProcessW
GetVersionExW
GetNativeSystemInfo
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GetSystemTimeAsFileTime
HeapReAlloc
RaiseException
RtlUnwind
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
ExitProcess
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
SetFilePointerEx
SetStdHandle
WriteConsoleW
ReadConsoleW
advapi32
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
Sections
.text Size: 546KB - Virtual size: 546KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ