Static task
static1
Behavioral task
behavioral1
Sample
65f4fef283a298db41457a7f6b4e39af9f0a0e7a3776c8af12162479686f89ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
65f4fef283a298db41457a7f6b4e39af9f0a0e7a3776c8af12162479686f89ee.exe
Resource
win10v2004-20220812-en
General
-
Target
65f4fef283a298db41457a7f6b4e39af9f0a0e7a3776c8af12162479686f89ee
-
Size
144KB
-
MD5
48c9816469e8ae657e8e589acbe9acfc
-
SHA1
ff591a5bdf516c2b3dd71d362ab2b33087d6dc76
-
SHA256
65f4fef283a298db41457a7f6b4e39af9f0a0e7a3776c8af12162479686f89ee
-
SHA512
6a0100ce97b9f054bff8684e6bfe653aab30600c70c82285349f09bc7bd354e65e6ff4fa3333cb9ab1e20c59f18275f0a0bf6a9ef7248b3f5b069afee038a926
-
SSDEEP
3072:FDZNy0z6Hl1OMTxQ2j4yD7EGkD37OzoI7h+aS1GN:Xh+H3OM9Qm4yXmCzo0naGN
Malware Config
Signatures
Files
-
65f4fef283a298db41457a7f6b4e39af9f0a0e7a3776c8af12162479686f89ee.exe windows x86
c9b9e55a49bd483dcece3fcfaf064a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
GetProcAddress
LoadLibraryA
FreeLibrary
WritePrivateProfileStringA
CloseHandle
CreateFileA
Sleep
GetEnvironmentVariableA
GetPrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
GetLastError
SetFileAttributesA
GetFileAttributesA
CreateDirectoryA
CopyFileA
GetLocalTime
CompareStringW
CompareStringA
SetEndOfFile
LCMapStringW
LCMapStringA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
InitializeCriticalSection
ExitProcess
RtlUnwind
RaiseException
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ReadFile
WideCharToMultiByte
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
WriteFile
FlushFileBuffers
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
InterlockedExchange
SetFilePointer
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
SetEnvironmentVariableA
user32
IsWindow
PostMessageA
MessageBoxA
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
DefWindowProcA
KillTimer
CreateWindowExA
ShowWindow
UpdateWindow
SetTimer
PostQuitMessage
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ