Static task
static1
Behavioral task
behavioral1
Sample
634dbdf8604b0e1da0bfa0aafe258240134713c34db69b2c6f8c6f27fbb2c650.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
634dbdf8604b0e1da0bfa0aafe258240134713c34db69b2c6f8c6f27fbb2c650.exe
Resource
win10v2004-20220812-en
General
-
Target
634dbdf8604b0e1da0bfa0aafe258240134713c34db69b2c6f8c6f27fbb2c650
-
Size
392KB
-
MD5
269deebb54b2c4580d902374a905a420
-
SHA1
f597e147201c30e969c650d82fbb44a91b24406f
-
SHA256
634dbdf8604b0e1da0bfa0aafe258240134713c34db69b2c6f8c6f27fbb2c650
-
SHA512
a51118d647a7e7b6d3e548adc7a68f648dec01dcb46d0b48f8dbe61a063c18a7036a6d757c037ed4551f86d9679990a7fbf43a4833dea1ea7e2dbfb7d2ae35ce
-
SSDEEP
6144:eUFloT1SFiWhF/n6c2IK0/Vz2G+vXgXSJ0AnZVd2pwRIoKz8C:eUFlopSoW//n6/BOSG+vXgXiZVd2pJ
Malware Config
Signatures
Files
-
634dbdf8604b0e1da0bfa0aafe258240134713c34db69b2c6f8c6f27fbb2c650.exe windows x86
5ed8d707736165e58aa1f0abf03fd7eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryW
Sleep
GetModuleFileNameW
GetProcAddress
GetModuleHandleA
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
HeapReAlloc
HeapSize
RtlUnwind
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
GetCPInfo
HeapAlloc
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetLastError
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetProcessHeap
SetLastError
GetCurrentThreadId
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
CloseHandle
user32
DispatchMessageW
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
DialogBoxParamW
BeginPaint
TranslateMessage
LoadAcceleratorsW
RegisterClassExW
LoadIconW
MessageBoxA
EndDialog
ShowWindow
CreateWindowExW
UpdateWindow
DefWindowProcW
ole32
CoUninitialize
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE