Static task
static1
Behavioral task
behavioral1
Sample
62b64c011a816d97ae017aedc192da94f3af056db626f11b7f491af17b137af3.exe
Resource
win7-20220812-en
General
-
Target
62b64c011a816d97ae017aedc192da94f3af056db626f11b7f491af17b137af3
-
Size
111KB
-
MD5
47f1933df3407ba33fe37eb7f762f8fa
-
SHA1
2c7b3a4584a43f4668a1477d5c14d6752edb1218
-
SHA256
62b64c011a816d97ae017aedc192da94f3af056db626f11b7f491af17b137af3
-
SHA512
3acf9e20fbbce91733d86da332694c8d95e242836097e1889d8cad18eb3a0dbaf069ad10d4e7a39fb409ad7d4b6f11b47f1016ec76092c0d643f0ead8289e46d
-
SSDEEP
1536:fjIZXMlgZ4IX4637Q9Gnyf4hvc3woEAphvzkg1wxlhR2LjyWUQIf8Kq2iKbTTAx6:fOcle5M9nfh5JrzkhAy3f8KB4R
Malware Config
Signatures
Files
-
62b64c011a816d97ae017aedc192da94f3af056db626f11b7f491af17b137af3.exe windows x86
3601b0926ec0fab620c21f43e41fe57e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
kernel32
FindResourceA
GetProcAddress
LoadLibraryA
InterlockedDecrement
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
InterlockedIncrement
InitializeCriticalSection
lstrlenA
lstrcpynA
lstrlenW
SizeofResource
GetLastError
LoadResource
FreeLibrary
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrcatA
GetStartupInfoA
user32
PostThreadMessageA
GetMessageA
CharNextA
DispatchMessageA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
oleaut32
LoadTypeLi
VariantClear
VariantInit
VariantCopy
SysFreeString
VarI4FromStr
RegisterTypeLi
LoadRegTypeLi
SetErrorInfo
msvcrt
__setusermatherr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_purecall
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
malloc
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE