Static task
static1
Behavioral task
behavioral1
Sample
680bf3cf35afeef65361a809e6e079f3014030999db28925ad80923ac24205f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
680bf3cf35afeef65361a809e6e079f3014030999db28925ad80923ac24205f7.exe
Resource
win10v2004-20220901-en
General
-
Target
680bf3cf35afeef65361a809e6e079f3014030999db28925ad80923ac24205f7
-
Size
508KB
-
MD5
56cbae95fcd924ab7971282e678cfe66
-
SHA1
89dc643ee492d6facc1f52c3f46a802502377a91
-
SHA256
680bf3cf35afeef65361a809e6e079f3014030999db28925ad80923ac24205f7
-
SHA512
3fe53bdbb265abd4bdce8edd5f769f32180679cda7dc2d31f8caca6b6a8bc1c517f620c7c0318b4a65759020bfafda1db2dfb0a3e94e19bc272506962fb8c5dc
-
SSDEEP
6144:M58Q4oHYMktFxUNxUKx/EIBB2lq9csUEt7Xig78b142659226iX2JsYg6Aw29aIc:HMktSOISkc9uS1CpIT7dDIA9JKvPPaGa
Malware Config
Signatures
Files
-
680bf3cf35afeef65361a809e6e079f3014030999db28925ad80923ac24205f7.exe windows x86
761ff26fa15114989fb5165b36eccc9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualAlloc
GetSystemInfo
GetLastError
VirtualProtect
CloseHandle
GetCurrentProcess
VirtualQuery
GetStringTypeW
GetStringTypeA
LCMapStringW
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WriteFile
HeapDestroy
HeapCreate
HeapReAlloc
FlushFileBuffers
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwind
InterlockedExchange
HeapSize
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
GetLocaleInfoA
user32
MessageBoxA
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DataL Size: 32KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DataG Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE