Static task
static1
Behavioral task
behavioral1
Sample
63dd1c69576ca1f92be2591f4f1ce2c5fc5ce34b168c83e4409acf9e0d754a52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63dd1c69576ca1f92be2591f4f1ce2c5fc5ce34b168c83e4409acf9e0d754a52.exe
Resource
win10v2004-20220812-en
General
-
Target
63dd1c69576ca1f92be2591f4f1ce2c5fc5ce34b168c83e4409acf9e0d754a52
-
Size
228KB
-
MD5
921292a8713d2ed16dbbdbab863b1555
-
SHA1
65e95054fcafaf2d80f68fa7dfe88f49677ad6b0
-
SHA256
63dd1c69576ca1f92be2591f4f1ce2c5fc5ce34b168c83e4409acf9e0d754a52
-
SHA512
d2ddebf07d912164109987378a6bffa53c88c36bb2bb1e5a9db10b2f8c6ef7dc604dfb21f17ab3e1a9b8a2c575a893fa44af7296a64426c85ab2824b3f3c327a
-
SSDEEP
3072:IjjjjjjjjjpvyDOh//9mlthYU7UfUxAUc35Ej7aAG:HDp6AUfIc2eA
Malware Config
Signatures
Files
-
63dd1c69576ca1f92be2591f4f1ce2c5fc5ce34b168c83e4409acf9e0d754a52.exe windows x86
1792722e7a0d953f667fc991d6aa1892
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetCPInfo
GetFileType
GetOEMCP
GetStringTypeA
GetStringTypeW
GetSystemInfo
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InterlockedExchange
CreateFileMappingA
LCMapStringA
LCMapStringW
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetUnhandledExceptionFilter
UnmapViewOfFile
VirtualFree
VirtualProtect
VirtualQuery
lstrcpynA
VirtualAlloc
GetCurrentProcess
GetStartupInfoW
GlobalAlloc
GetWindowsDirectoryA
CreateFileW
GetWindowsDirectoryW
IsDBCSLeadByteEx
lstrcatW
user32
ReleaseDC
LoadCursorA
LoadIconA
MessageBoxA
GetFocus
SetCaretPos
GetDC
CreateCaret
ShowCaret
DefWindowProcA
GetSystemMetrics
GetSysColor
gdi32
GetStockObject
GetTextMetricsA
SelectObject
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
msvcrt
memcpy
free
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ