Static task
static1
Behavioral task
behavioral1
Sample
59ac9b30ad3b7c571f2f5a07d7d05b179de87cae2115594305637b4913c386a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59ac9b30ad3b7c571f2f5a07d7d05b179de87cae2115594305637b4913c386a6.exe
Resource
win10v2004-20220901-en
General
-
Target
59ac9b30ad3b7c571f2f5a07d7d05b179de87cae2115594305637b4913c386a6
-
Size
281KB
-
MD5
6f4938839c3a818d567f372b515f0760
-
SHA1
31ba1f245e5aa54c4cb70f289e6ecce908a1b053
-
SHA256
59ac9b30ad3b7c571f2f5a07d7d05b179de87cae2115594305637b4913c386a6
-
SHA512
d00e997e39d12faaa4e91a1ef2346af6dd7bd1dbbeb22096ea446f9d7050286debbfaaf1905b4ea6031035e9d7de37ce704c54722bb6704e4e79337875b86440
-
SSDEEP
6144:vjWzq45TQx9aSe8Eoy9fuKDpVd0+F6nSawDlZjVXzUQo:vRsIkqEWip8C6npyjVDUT
Malware Config
Signatures
Files
-
59ac9b30ad3b7c571f2f5a07d7d05b179de87cae2115594305637b4913c386a6.exe windows x86
daf951639d787082ab8a08f5e3f3403a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
GetSystemTimeAsFileTime
HeapFree
lstrlenW
GetLocaleInfoW
lstrcmpA
LoadLibraryA
GetCurrentProcess
WideCharToMultiByte
CreateFileA
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GlobalFindAtomA
HeapAlloc
CloseHandle
GetTickCount
lstrcpyW
GetProcessHeap
GetLocalTime
MultiByteToWideChar
SetUnhandledExceptionFilter
SystemTimeToFileTime
GetOEMCP
w32topl
ToplScheduleCreate
ToplScheduleExportReadonly
ToplSTHeapDestroy
ToplScheduleCacheDestroy
ToplSTHeapExtractMin
ToplSTHeapInit
ToplScheduleDuration
ToplScheduleCacheCreate
fmifs
Extend
EnableVolumeCompression
Chkdsk
FormatEx
DiskCopy
ComputeFmMediaType
Format
Sections
.text Size: 275KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ