Static task
static1
Behavioral task
behavioral1
Sample
718516c4b4206b3a5b2885d38da575d3b681c80498aa3032e8c63abd1e9bd27c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
718516c4b4206b3a5b2885d38da575d3b681c80498aa3032e8c63abd1e9bd27c.exe
Resource
win10v2004-20220901-en
General
-
Target
718516c4b4206b3a5b2885d38da575d3b681c80498aa3032e8c63abd1e9bd27c
-
Size
208KB
-
MD5
6402fd54474d74f0be3d06959a7b0ae0
-
SHA1
cea8e278f3031f84024a8fcaa8c3a1b7d5d70a56
-
SHA256
718516c4b4206b3a5b2885d38da575d3b681c80498aa3032e8c63abd1e9bd27c
-
SHA512
7a82e21c3d0715b27054ee9b36b7ae007cf4ffb6a11475c4cc11da826640eb747a38218fa903107075da85250561a7559e2f311181d7f80734faa4d778871367
-
SSDEEP
3072:GS9YnDmBRjIZ6G5nq53g0neZ5qjpjmFB4P+wPHH0dU+KrVvwpQIWk3QdAS:GSCmP9sqg0eWjpjmFB2nPhrVSQZIQdAS
Malware Config
Signatures
Files
-
718516c4b4206b3a5b2885d38da575d3b681c80498aa3032e8c63abd1e9bd27c.exe windows x86
8cf3d4afdb6bdc00ce2721b8aa498510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetProcessHeap
lstrcmpA
SystemTimeToFileTime
GetLocaleInfoW
GetSystemDefaultLCID
CreateFileA
SetLastError
GetEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
lstrcpyA
CloseHandle
LoadResource
GetLocalTime
GetVolumeInformationA
GetTickCount
GetCurrentProcess
MultiByteToWideChar
FreeResource
GetOEMCP
LockResource
GetCurrentProcessId
QueryDosDeviceA
GetProcessId
lstrlenA
HeapAlloc
DeviceIoControl
HeapFree
LoadLibraryW
FindResourceA
advapi32
RegOpenKeyW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
quartz
AMGetErrorTextA
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextW
DllUnregisterServer
AmpFactorToDB
user32
wsprintfA
CharNextA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ