Static task
static1
Behavioral task
behavioral1
Sample
66395654e2eca4368147669984abfb1073bd4f5e2750d8edeb53925590d535e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66395654e2eca4368147669984abfb1073bd4f5e2750d8edeb53925590d535e0.exe
Resource
win10v2004-20220812-en
General
-
Target
66395654e2eca4368147669984abfb1073bd4f5e2750d8edeb53925590d535e0
-
Size
64KB
-
MD5
434cf4c85e576aeaa13b81c4e9890dc0
-
SHA1
0735b5cecef807d77bf1d35e4c85ba6f0548b990
-
SHA256
66395654e2eca4368147669984abfb1073bd4f5e2750d8edeb53925590d535e0
-
SHA512
bc0504628ad1d628749f9a3492ec63669d7c3b2f9da693e2f0c25dfd95833906ed4ee5d771322060cf5733fd03d9441ef91c5ea1e6d67829ae5bae0650e309a2
-
SSDEEP
1536:gC9zvzNnMF/HkDeAD8GXN+I7fJ+aCl1fe2:hnQkDpzoI7h+aS1G2
Malware Config
Signatures
Files
-
66395654e2eca4368147669984abfb1073bd4f5e2750d8edeb53925590d535e0.exe windows x86
c9fa24fffe281f8d907e79788d54dd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
alcohol
?AlcoholEnd@@YAHXZ
?AlcoholStart@@YAHPAUHWND__@@PBDG1H1KKKK@Z
kernel32
GetCommandLineA
Sleep
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
RtlUnwind
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapSize
user32
GetMessageA
DispatchMessageA
TranslateMessage
RegisterClassExA
KillTimer
DefWindowProcA
SendMessageA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
SetTimer
FindWindowA
PostMessageA
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE