Static task
static1
Behavioral task
behavioral1
Sample
6533e0efdfe284b1dd5d4e6cf85dea239828a5ae5705af830df4d1ed384095de.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6533e0efdfe284b1dd5d4e6cf85dea239828a5ae5705af830df4d1ed384095de.exe
Resource
win10v2004-20220812-en
General
-
Target
6533e0efdfe284b1dd5d4e6cf85dea239828a5ae5705af830df4d1ed384095de
-
Size
208KB
-
MD5
617c32ed8a4c304d06644f536265c8e0
-
SHA1
67f10705513818448d5a93425474ce3a0ed14b47
-
SHA256
6533e0efdfe284b1dd5d4e6cf85dea239828a5ae5705af830df4d1ed384095de
-
SHA512
53c9f8025af8d3f9924511b351190936d0fb174672079134ea6ef3d28a9db97ad546923cdbc7c2228b379935eb8102eff906adc2882b7d44794c0ccec4e8fbac
-
SSDEEP
6144:ZE49Bao8PJEuXi6nR+BgnUGcSy8chVdGBis:FqRi6RtnUGcB8idA
Malware Config
Signatures
Files
-
6533e0efdfe284b1dd5d4e6cf85dea239828a5ae5705af830df4d1ed384095de.exe windows x86
45f19ff987dd4216c359d3cc016ad4da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
MultiByteToWideChar
FindResourceA
GetOEMCP
SetLastError
QueryPerformanceCounter
CreateFileA
SystemTimeToFileTime
GetTickCount
LoadLibraryW
WideCharToMultiByte
HeapFree
GetLocalTime
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcpyA
lstrcmpA
CloseHandle
lstrlenA
GetProcessHeap
GetLocaleInfoA
HeapAlloc
scecli
SceBrowseDatabaseTable
SceAddToNameStatusList
SceCloseProfile
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem
schannel
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 3KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ