Static task
static1
Behavioral task
behavioral1
Sample
63f4ee3c54167cf04cf86d049a52c4ed9e0e1f5507e15314d13c9545e51da109.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63f4ee3c54167cf04cf86d049a52c4ed9e0e1f5507e15314d13c9545e51da109.exe
Resource
win10v2004-20220812-en
General
-
Target
63f4ee3c54167cf04cf86d049a52c4ed9e0e1f5507e15314d13c9545e51da109
-
Size
273KB
-
MD5
31e895a0a84d40c694db1594c0d55bc0
-
SHA1
58072adc9fa88c5f63e4e53f103e248b352ebf8d
-
SHA256
63f4ee3c54167cf04cf86d049a52c4ed9e0e1f5507e15314d13c9545e51da109
-
SHA512
cdc5e029c24c31b01c9964e0328b686dccdd6f7375388b50883b90a66aa72ddeaf6741049555be8776b1064145df90df29d4561a8b7f56e994a96b11a52e33b3
-
SSDEEP
6144:0hZl+QBfVzRoSsAYBjz6UFpHbtQXMZR5WxMMw:fQBflRFsAYFJQ/w
Malware Config
Signatures
Files
-
63f4ee3c54167cf04cf86d049a52c4ed9e0e1f5507e15314d13c9545e51da109.exe windows x86
dba540a5aaa529801d7dd4735ef2c6e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
w32topl
ToplScheduleExportReadonly
ToplScheduleCacheCreate
ToplSTHeapExtractMin
ToplScheduleCacheDestroy
ToplScheduleDuration
ToplSTHeapDestroy
ToplSTHeapInit
ToplScheduleCreate
fmifs
DiskCopy
Format
ComputeFmMediaType
FormatEx
Extend
EnableVolumeCompression
Chkdsk
kernel32
SetUnhandledExceptionFilter
HeapFree
GetLocaleInfoW
GetTickCount
GetProcessHeap
SystemTimeToFileTime
lstrlenW
GetOEMCP
CreateFileA
QueryPerformanceCounter
lstrcmpA
FindResourceW
GetCurrentProcess
WideCharToMultiByte
GetSystemTimeAsFileTime
lstrcpyW
SetLastError
GetLocalTime
LoadLibraryA
HeapAlloc
GetCurrentProcessId
CloseHandle
MultiByteToWideChar
Sections
.text Size: 267KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ