Static task
static1
Behavioral task
behavioral1
Sample
64b3f4787f42226ea1107155cad0d391dd56167a803b9ca1adb2682f929f23b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64b3f4787f42226ea1107155cad0d391dd56167a803b9ca1adb2682f929f23b4.exe
Resource
win10v2004-20220812-en
General
-
Target
64b3f4787f42226ea1107155cad0d391dd56167a803b9ca1adb2682f929f23b4
-
Size
3.8MB
-
MD5
4cebd48689fe425d5823e266a3d7af14
-
SHA1
2ef6033f206dc5086b7d473c6ea6368778787940
-
SHA256
64b3f4787f42226ea1107155cad0d391dd56167a803b9ca1adb2682f929f23b4
-
SHA512
c9f1b68c0c496cca2b21f07a7e599cd9afd52273171527c9ebc024113bff494031cdab2301903f3c901f96e047867d9601f4dca4b26f7c70acf66b5ee0ea6bdb
-
SSDEEP
98304:63oTtsLcgeWcxIC5lyEmlEv6JSIyR3nN6hdYqyiwBk0PtpOI:67zeWJC509MMuo0
Malware Config
Signatures
Files
-
64b3f4787f42226ea1107155cad0d391dd56167a803b9ca1adb2682f929f23b4.exe windows x86
3f35115a995406ab57e0afcc97b046f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupIterateCabinetW
ole32
CoUninitialize
CoInitializeEx
shell32
ShellExecuteExW
ShellExecuteW
user32
MessageBoxW
wsprintfW
kernel32
FreeLibrary
ExitProcess
GetStartupInfoW
LockResource
SetEnvironmentVariableW
CreateFileW
LoadLibraryA
GetModuleFileNameW
lstrcpyW
WriteFile
VerSetConditionMask
WaitForSingleObject
GetCommandLineW
GetTempPathW
SizeofResource
FindResourceW
GetLastError
GetModuleHandleW
GetProcAddress
LoadResource
GetExitCodeProcess
CloseHandle
DeleteFileW
Sections
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE