Static task
static1
Behavioral task
behavioral1
Sample
64277c31b0a95b657ecc51fefae3fa4a9f793dcf83ae443740af74bc5f0cfaa6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64277c31b0a95b657ecc51fefae3fa4a9f793dcf83ae443740af74bc5f0cfaa6.exe
Resource
win10v2004-20220812-en
General
-
Target
64277c31b0a95b657ecc51fefae3fa4a9f793dcf83ae443740af74bc5f0cfaa6
-
Size
782KB
-
MD5
5046c8589b2fc8157642bf4ef0fa2870
-
SHA1
decf9d48d1d069e94dc1d1305c943fb3c6ff70b5
-
SHA256
64277c31b0a95b657ecc51fefae3fa4a9f793dcf83ae443740af74bc5f0cfaa6
-
SHA512
b8f6d9cfd868e217af73d6e5042ab62569da07fc3098a520f5b885785d9ff1a1edc136f941783f01402890b2ee6443ccaf9b93f74a7e7ceef621245686ec2a5b
-
SSDEEP
24576:Xgg7eUB0HZijfkELUy+XlTAk3iFwc4Ec3PBQbfJ:XBeUGijfkz1T/3gJVaJQbR
Malware Config
Signatures
Files
-
64277c31b0a95b657ecc51fefae3fa4a9f793dcf83ae443740af74bc5f0cfaa6.exe windows x86
f8b9168fa23478dcd237f91ac9d52747
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
msimg32
AlphaBlend
ole32
CreateStreamOnHGlobal
IsAccelerator
CoTaskMemFree
OleSetMenuDescriptor
OleInitialize
ProgIDFromCLSID
CoUninitialize
DoDragDrop
RevokeDragDrop
CoCreateInstance
OleGetClipboard
CoInitialize
CreateDataAdviseHolder
ReleaseStgMedium
CoTaskMemAlloc
CoRegisterClassObject
StringFromCLSID
RegisterDragDrop
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
OleUninitialize
CoGetClassObject
CoGetMalloc
OleDraw
OleSetClipboard
IsEqualGUID
ntdll
RtlInitUnicodeString
RtlAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
Sections
.text Size: 1024B - Virtual size: 730B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 776KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ