Static task
static1
Behavioral task
behavioral1
Sample
696bcf512d85206a79a771512c64e0cebb26c310e9654c8735cbd9d64af5b627.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
696bcf512d85206a79a771512c64e0cebb26c310e9654c8735cbd9d64af5b627.exe
Resource
win10v2004-20220812-en
General
-
Target
696bcf512d85206a79a771512c64e0cebb26c310e9654c8735cbd9d64af5b627
-
Size
494KB
-
MD5
59521a557d2abb97f1b1091ce0ef6460
-
SHA1
ddd90189a418b26c75fac73abdb717c7ca5b2e85
-
SHA256
696bcf512d85206a79a771512c64e0cebb26c310e9654c8735cbd9d64af5b627
-
SHA512
6c933877e09a91b191ca24c52f53a2dd86a261cec81de5647f84c4f08df213b056b7b7600a19c9dfddd9ac5a6397f8dd82ffe853c253fa648b293030a529aeed
-
SSDEEP
12288:rPhar8wUwPENNCPNDIpmjR2TLGZT1F87yO:z8rlUn6lIwRIaOT
Malware Config
Signatures
Files
-
696bcf512d85206a79a771512c64e0cebb26c310e9654c8735cbd9d64af5b627.exe windows x86
706fb5894bed5dac949969595451df0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
_controlfp
_exit
wcscpy
_adjust_fdiv
__p__fmode
__setusermatherr
__winitenv
_wcsicmp
__wgetmainargs
printf
_c_exit
_stricmp
_cexit
sprintf
strstr
_except_handler3
_XcptFilter
kernel32
GetModuleFileNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetCPInfo
VirtualFree
LoadLibraryA
WideCharToMultiByte
SetLastError
GetOEMCP
FreeLibrary
MultiByteToWideChar
GetLocaleInfoW
GetWindowsDirectoryW
ExpandEnvironmentStringsW
advapi32
RegOpenKeyExW
RegQueryValueExA
Sections
.gwe5g Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.46hwed Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.etg54g Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.j7254ry Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.h6j46y6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE