Static task
static1
Behavioral task
behavioral1
Sample
c66b061f9b4a186e31bdc533d1471948ad7f009ad0be067fa9f82f806da26e3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c66b061f9b4a186e31bdc533d1471948ad7f009ad0be067fa9f82f806da26e3d.exe
Resource
win10v2004-20220812-en
General
-
Target
c66b061f9b4a186e31bdc533d1471948ad7f009ad0be067fa9f82f806da26e3d
-
Size
725KB
-
MD5
5b6473ce3069b9115cc0f0eae1effc90
-
SHA1
11eeb8711ed8f88c9cbf80f4ff056bf6ee1d38ed
-
SHA256
c66b061f9b4a186e31bdc533d1471948ad7f009ad0be067fa9f82f806da26e3d
-
SHA512
91613014c8d72f70ff1be35d48d900587eb3c9eb0fd4205e89f1fefa29e155e00b9fa83b5516c7ddcafa75cb799ee96d29b45b3293944d992c4ff893f34763c7
-
SSDEEP
12288:7U1Unympuvrawco9olysYeZ+fv9WVX05E4CKy466sNAubxbJqLz3pbH:g1UnFwrP9o33ZAFi05aKyLjAL1
Malware Config
Signatures
Files
-
c66b061f9b4a186e31bdc533d1471948ad7f009ad0be067fa9f82f806da26e3d.exe windows x86
f9cc7c5234b30d9f7b1892f0a3eb48ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LsaLookupPrivilegeDisplayName
FreeEncryptionCertificateHashList
kernel32
GetCurrentProcessId
GetProcessHandleCount
GetConsoleWindow
oleaut32
VarDecInt
ntdll
RtlNumberOfSetBits
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE