Static task
static1
Behavioral task
behavioral1
Sample
69687ce9cca470edc8ec2feb0ed2462f69e01a6ae017c59c31f6edd9eb15f75e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69687ce9cca470edc8ec2feb0ed2462f69e01a6ae017c59c31f6edd9eb15f75e.exe
Resource
win10v2004-20220812-en
General
-
Target
69687ce9cca470edc8ec2feb0ed2462f69e01a6ae017c59c31f6edd9eb15f75e
-
Size
164KB
-
MD5
6254dcc284140eb24657f6bbb068739e
-
SHA1
3bfb2668465f5368d396d1d18acbb60034287d44
-
SHA256
69687ce9cca470edc8ec2feb0ed2462f69e01a6ae017c59c31f6edd9eb15f75e
-
SHA512
c73e4077f1413f99eb3ad7ab6d4dcbd8c679fa22602fc9500f7bc1cb4bf8fda05c50e349451bd18298392194a616e2362adb70bb2995b64269482bd4c910e404
-
SSDEEP
3072:al3OYTv6NtNGpPgYJmzFTcvQhhxocx9lND6JNetGMFCYe4nDd7gRsFH15ouht+n:aV6NGPDJCFTcvGhxjxD9e63FH1a
Malware Config
Signatures
Files
-
69687ce9cca470edc8ec2feb0ed2462f69e01a6ae017c59c31f6edd9eb15f75e.exe windows x86
8cf33c388a15c37ccd608ac4ced0a190
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileExA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
user32
PeekMessageW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
StgOpenStorageEx
oleaut32
GetActiveObject
SafeArrayGetRecordInfo
VarUI1FromDec
VariantInit
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ