Static task
static1
Behavioral task
behavioral1
Sample
03A6D3CDE073EFE39FC87D898F9F4615.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03A6D3CDE073EFE39FC87D898F9F4615.exe
Resource
win10v2004-20220901-en
General
-
Target
03A6D3CDE073EFE39FC87D898F9F4615.fil
-
Size
4.5MB
-
MD5
03a6d3cde073efe39fc87d898f9f4615
-
SHA1
2f21a188f710ad0068fe21ae879cfba26a1b22f2
-
SHA256
e2f33cdda2537c8d70a9d4f0b8bc983ac6cf21b1e7a70b1027df388973b6a35a
-
SHA512
37c03a549f7fe05f9599850bee49bb741e9fdd5254b04037377eedb48ccdcd7a37f6d75b12a27a9ea749ff28b6f5303a034df2f0a3926da6f3229866f77501ee
-
SSDEEP
98304:zyvYqfNDxcGTOeXLqnOvS4sVErA3IWRfrP7123xV6P5cIKKX:mvTGcOMenOH8GA/fr7123xVv3+
Malware Config
Signatures
Files
-
03A6D3CDE073EFE39FC87D898F9F4615.fil.exe windows x64
b35fc88827ecd848d53252f08d423ee5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
rtc_dll_x64
setInput
geocpm64
initGeoCPM
msvcp100
?_Xout_of_range@std@@YAXPEBD@Z
msvcr100
rand
hasp_windows_x64_86477
ord4
imagehlp
SymCleanup
Sections
.AKS1 Size: 1009KB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AKS2 Size: 3.5MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AKS3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE