Static task
static1
Behavioral task
behavioral1
Sample
de2de63ce8f6c961b468fa0ac33b87ee2483cb2156b86a7486eff2e6b82cbc9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de2de63ce8f6c961b468fa0ac33b87ee2483cb2156b86a7486eff2e6b82cbc9d.exe
Resource
win10v2004-20220812-en
General
-
Target
de2de63ce8f6c961b468fa0ac33b87ee2483cb2156b86a7486eff2e6b82cbc9d
-
Size
200KB
-
MD5
63a5b1041cfc46cb7b684ddea7eca8e0
-
SHA1
28116048865ff373002297e72ebce3bbd431f9b4
-
SHA256
de2de63ce8f6c961b468fa0ac33b87ee2483cb2156b86a7486eff2e6b82cbc9d
-
SHA512
508df84eae1cce6067d8529980be9790b688d8075326852414eaa062c904e38ce0f16fd221cdfb6f73331d56f74729525180c7daf2138cbaec24cc94ee15ae22
-
SSDEEP
6144:0YYfFwIW/cAgpYPilnoNbq+i036nHFkr:NkHW2pY6l0q+kn
Malware Config
Signatures
Files
-
de2de63ce8f6c961b468fa0ac33b87ee2483cb2156b86a7486eff2e6b82cbc9d.exe windows x86
865df307f560ffebd2e29acda46151be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess
gdi32
CombineTransform
Arc
RectVisible
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ