Static task
static1
Behavioral task
behavioral1
Sample
668db58c6de29aecb3df0b6ff4440bf4a9452624f8def806787a9963df0996b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
668db58c6de29aecb3df0b6ff4440bf4a9452624f8def806787a9963df0996b5.exe
Resource
win10v2004-20220901-en
General
-
Target
668db58c6de29aecb3df0b6ff4440bf4a9452624f8def806787a9963df0996b5
-
Size
958KB
-
MD5
01738c45eb78988df348177c988058a0
-
SHA1
2ae56bceeb73be93147c0c77c7fd2989ce73ce23
-
SHA256
668db58c6de29aecb3df0b6ff4440bf4a9452624f8def806787a9963df0996b5
-
SHA512
6b76de07525e1126d183ea7a9ae801e045d7105da1399c2bc2c425d99492e2703498fe1b5138fc64ff1f238a5bd234e327e445a5a355ac1e0ddcf29a673044c1
-
SSDEEP
24576:jMFv3CzvtJuasfKFEwVzepeztQuZJbvH:6gFJuasyywkpStQiJ
Malware Config
Signatures
Files
-
668db58c6de29aecb3df0b6ff4440bf4a9452624f8def806787a9963df0996b5.exe windows x86
a171ab6e495e79786c3522dae99180fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetModuleHandleA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GetVolumeInformationW
GetVolumePathNameW
LocalAlloc
GetConsoleMode
QueryPerformanceCounter
SetThreadUILanguage
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
lstrcmpiW
lstrlenW
VirtualAllocEx
LoadLibraryW
FormatMessageW
FormatMessageA
FindNextFileW
FindFirstFileW
LocalFree
FindClose
user32
GetSysColor
LoadIconW
LoadCursorW
gdi32
CreateMetaFileW
CreateHalftonePalette
advapi32
RegQueryValueExA
RegOpenKeyA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 951KB - Virtual size: 951KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ