Static task
static1
Behavioral task
behavioral1
Sample
69ec84585ca34fab77a052de9ea46020ff884d1de6cd43860fcaecd2b64d6b7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69ec84585ca34fab77a052de9ea46020ff884d1de6cd43860fcaecd2b64d6b7d.exe
Resource
win10v2004-20220812-en
General
-
Target
69ec84585ca34fab77a052de9ea46020ff884d1de6cd43860fcaecd2b64d6b7d
-
Size
801KB
-
MD5
5d7b63dbe467af7519122a6e63646f00
-
SHA1
0a514f17280c5c28896492b580b23132c9bbc672
-
SHA256
69ec84585ca34fab77a052de9ea46020ff884d1de6cd43860fcaecd2b64d6b7d
-
SHA512
0903c9610473d95f7a913ae14bc8da9b8f4c9501dd8702dec40bbc6d8cd6b2923b1e5ff740bb463177f5b1ab7c146d9754bcce5a9193b9315056bc2c73fdc69a
-
SSDEEP
24576:xL6mkj3ANy8C/nP5nSAsTbjcLOKUVwcQBb1CEm9Y:xLio2/B6TXJVoB6Y
Malware Config
Signatures
Files
-
69ec84585ca34fab77a052de9ea46020ff884d1de6cd43860fcaecd2b64d6b7d.exe windows x86
49f4bc0bfee8dd5acfe5c8ab59272301
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCreateFile
ws2_32
htons
kernel32
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SendMessageA
gdi32
SetBkMode
advapi32
RegCloseKey
ole32
CoUninitialize
oleaut32
VariantClear
msvcrt
__setusermatherr
urlmon
URLDownloadToFileW
psapi
GetModuleBaseNameW
Sections
.rijks Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rqr Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ywm Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmybs Size: - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eiwj Size: 766KB - Virtual size: 766KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gekdc Size: 512B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ijmrxs Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ