Static task
static1
Behavioral task
behavioral1
Sample
b63e4614d6fc485f088ddf66af0d7cb76351ec7947594b1ac78c298cd0080459.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b63e4614d6fc485f088ddf66af0d7cb76351ec7947594b1ac78c298cd0080459.exe
Resource
win10v2004-20220812-en
General
-
Target
b63e4614d6fc485f088ddf66af0d7cb76351ec7947594b1ac78c298cd0080459
-
Size
153KB
-
MD5
7b4aa9168701dea125acbf275ddcba10
-
SHA1
1bd765b795bf83fb5afa102c9caf1ad003943b53
-
SHA256
b63e4614d6fc485f088ddf66af0d7cb76351ec7947594b1ac78c298cd0080459
-
SHA512
0384307793ecb2ce44edd7c46e6cc6e4faded8b85775676602dd0267e3acaf4e10ff3181537965c59047b7d08c48c07b8d97689d082474f32585f983952b9316
-
SSDEEP
1536:HBRAz02oBRVD3EaVTtofViuQnLpVMje91/7gOp4G/z:HBRr2wH0abofVC3Mj+1/7gOp4Gb
Malware Config
Signatures
Files
-
b63e4614d6fc485f088ddf66af0d7cb76351ec7947594b1ac78c298cd0080459.exe windows x86
f576a4f7e08068542bcba9666b830622
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
WaitForSingleObject
LoadLibraryA
LocalAlloc
DeleteCriticalSection
Sleep
GetCurrentThreadId
VirtualAlloc
InitializeCriticalSection
SetFilePointer
SetLastError
SetLastError
GetSystemTimeAsFileTime
HeapAlloc
LeaveCriticalSection
lstrcmpiW
UnhandledExceptionFilter
LeaveCriticalSection
CloseHandle
GetSystemTimeAsFileTime
SetLastError
UnhandledExceptionFilter
lstrlenW
HeapFree
InterlockedIncrement
GetCurrentProcess
GetLastError
lstrcmpiW
HeapFree
GetProcessHeap
HeapReAlloc
LocalFree
WriteFile
InterlockedIncrement
CreateFileW
CreateThread
GetCurrentThreadId
QueryPerformanceCounter
HeapAlloc
GetVersionExA
WriteFile
MultiByteToWideChar
HeapAlloc
GetStartupInfoA
GetModuleFileNameA
SetEvent
HeapDestroy
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
Sleep
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSection
GetProcAddress
SetFilePointer
GetLastError
LocalFree
GetModuleHandleA
GetCurrentProcessId
CloseHandle
UnhandledExceptionFilter
VirtualAlloc
WriteFile
FreeLibrary
UnhandledExceptionFilter
GetACP
SetUnhandledExceptionFilter
GetCommandLineW
InterlockedIncrement
VirtualAlloc
HeapDestroy
TerminateProcess
lstrcmpiW
ReadFile
LocalAlloc
GetProcAddress
VirtualFree
FormatMessageW
TerminateProcess
WideCharToMultiByte
lstrcmpiW
WideCharToMultiByte
GetCommandLineW
GetStartupInfoW
ReadFile
SetUnhandledExceptionFilter
FreeLibrary
WriteFile
GetProcessHeap
DeleteCriticalSection
GetVersionExA
WriteFile
InterlockedIncrement
LocalFree
LoadLibraryW
WriteFile
QueryPerformanceCounter
lstrcpyW
SetLastError
GetCurrentProcessId
lstrcpyW
VirtualFree
InterlockedDecrement
GetCurrentThreadId
TerminateProcess
lstrcpyW
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GetCurrentProcess
WriteFile
VirtualAlloc
SetEvent
VirtualFree
GetCurrentProcessId
GetCommandLineA
GetVersionExA
GetProcAddress
LocalAlloc
VirtualAlloc
LoadLibraryW
SetFilePointer
VirtualAlloc
SetFilePointer
GetStartupInfoW
Sleep
ExitProcess
GetProcessHeap
HeapFree
InterlockedIncrement
SetUnhandledExceptionFilter
GetVersionExA
FreeLibrary
Sleep
CloseHandle
FreeLibrary
SetUnhandledExceptionFilter
HeapAlloc
GetCurrentProcessId
GetModuleHandleW
InitializeCriticalSection
LocalAlloc
CreateThread
GetModuleHandleW
LocalFree
WriteFile
VirtualAlloc
lstrcpyW
GetStartupInfoW
GetStartupInfoW
GetLastError
lstrlenW
GetStartupInfoW
LocalFree
WideCharToMultiByte
GetModuleFileNameA
HeapDestroy
FormatMessageW
FreeLibrary
InterlockedDecrement
InterlockedDecrement
GetVersionExA
SetLastError
GetTickCount
VirtualAlloc
GetCurrentThreadId
FormatMessageW
GetACP
ExitProcess
Sleep
QueryPerformanceCounter
TerminateProcess
GetStartupInfoW
InitializeCriticalSection
GetStartupInfoA
GetLastError
TerminateProcess
lstrlenW
InterlockedIncrement
HeapAlloc
SetLastError
LocalFree
SetUnhandledExceptionFilter
InterlockedIncrement
DeleteCriticalSection
SetEvent
LeaveCriticalSection
SetLastError
CreateFileW
GetACP
TerminateProcess
LoadLibraryA
GetModuleHandleW
GetProcessHeap
FormatMessageW
ExitProcess
GetLastError
CloseHandle
GetStartupInfoW
GetCurrentProcess
lstrlenW
GetModuleFileNameA
lstrcmpiW
SetEvent
GetACP
Sleep
ExitProcess
DeleteCriticalSection
GetCurrentProcessId
LoadLibraryW
lstrcmpiW
LoadLibraryW
GetACP
HeapAlloc
GetLastError
DeleteCriticalSection
GetModuleHandleA
GetVersionExA
GetStartupInfoW
GetModuleHandleW
FormatMessageW
FormatMessageW
lstrcmpiW
Sections
.data Size: 134KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE