Static task
static1
Behavioral task
behavioral1
Sample
67a99c99bdb46950daffbb5690ba4fe281eb8a6683041582a12c3cc0930d3473.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67a99c99bdb46950daffbb5690ba4fe281eb8a6683041582a12c3cc0930d3473.exe
Resource
win10v2004-20220812-en
General
-
Target
67a99c99bdb46950daffbb5690ba4fe281eb8a6683041582a12c3cc0930d3473
-
Size
358KB
-
MD5
96ed06da683cfd6b80f92c5f60a8df7a
-
SHA1
09cd880d07da3c81c7efcfab699184e363216ee0
-
SHA256
67a99c99bdb46950daffbb5690ba4fe281eb8a6683041582a12c3cc0930d3473
-
SHA512
86d3896d11912274e049dc98eb42d2cc9b70bc180f55beaadc42f13330c17a4073ccc229c3471bd7f748ffbd08a77c6cd5742c5903528e72f4da22b4b7d90848
-
SSDEEP
6144:uFribn2ziJonY7JFI1kZuoi7Scuw483B/ZstcBJblY0ro4XrazeRtp/5f3WPxDYo:uFrc26oY7IKZuUw/B/6tsz304b1Hp/ZO
Malware Config
Signatures
Files
-
67a99c99bdb46950daffbb5690ba4fe281eb8a6683041582a12c3cc0930d3473.exe windows x86
632b845951ce31fc4489bf771096c648
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
SetLastError
GlobalSize
HeapCreate
GetConsoleCP
CompareFileTime
lstrlenA
WaitForSingleObject
GetAtomNameA
InterlockedExchange
HeapReAlloc
GetCommandLineA
GetModuleHandleA
WaitForMultipleObjects
GetConsoleDisplayMode
ResumeThread
VirtualProtect
GlobalUnlock
GetTickCount
GetVersion
GetUserDefaultLangID
user32
GetFocus
BeginPaint
DrawTextA
EndPaint
FrameRect
SetForegroundWindow
ShowWindow
FillRect
GetTitleBarInfo
wsprintfA
GetCursorPos
ReleaseDC
AnyPopup
GetClassNameA
GetWindow
GetParent
GetDC
CreateIcon
DragDetect
rastapi
DeviceDone
DeviceConnect
PortClose
DeviceListen
AddPorts
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ