Static task
static1
Behavioral task
behavioral1
Sample
2b63666c98c554f317f41e03b7272dc84c8a0dfd3a5727a2937fbdab0f677dc4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b63666c98c554f317f41e03b7272dc84c8a0dfd3a5727a2937fbdab0f677dc4.exe
Resource
win10v2004-20220812-en
General
-
Target
2b63666c98c554f317f41e03b7272dc84c8a0dfd3a5727a2937fbdab0f677dc4
-
Size
386KB
-
MD5
0a7899e4763ea80b18d2c6f01eb3ef58
-
SHA1
2bc123ec350cb5a2a88644a3c4ef7e22ac4f540f
-
SHA256
2b63666c98c554f317f41e03b7272dc84c8a0dfd3a5727a2937fbdab0f677dc4
-
SHA512
370b9605e4748fb9d5b71e830be09237da70db23f0befb7b8dc8baa026932272ad7704b0d9a9d026fe1d0fab69de66cd3f4fb3ad462246386baec96fad77bc65
-
SSDEEP
6144:KQD11v/igsoa2nrsH9yqpCx/aLA5CMJAz3YiIBn85DyIZowfd3ECLn3aIehS7N:bFvDhrsdy2ClIYpBn8dZbf3T3Pl
Malware Config
Signatures
Files
-
2b63666c98c554f317f41e03b7272dc84c8a0dfd3a5727a2937fbdab0f677dc4.exe windows x86
6d02dbce58d82517d22dcc598ed5fb65
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sxs
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
SizeofResource
_lopen
FindClose
GetACP
_lread
TlsFree
TlsFree
EnumSystemGeoID
GetConsoleTitleA
GlobalFree
DeleteAtom
GetVolumePathNameA
DuplicateHandle
EncodePointer
GlobalFree
AttachConsole
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
Beep
SetCommMask
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
Sections
.text Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE