Static task
static1
Behavioral task
behavioral1
Sample
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe
Resource
win10v2004-20220812-en
General
-
Target
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf
-
Size
208KB
-
MD5
730a5f0125f82f16440d879be055c2f0
-
SHA1
82a675f4b607bea5385ab153c0b24504b586cdeb
-
SHA256
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf
-
SHA512
76b7bb2489c802e1b0a6ecdf2b9ac32834ffcae58a07bb050607b6680d8c7f81464023ac7d5430e13e3dbb2dd5d2640e22575c9f3e76cacd4702bc938fca9574
-
SSDEEP
6144:74o4MfKW8KwqlsEnLv5Zbevoc1yq2Y9TFl/z+x:0JMfKKw5ELvv24MF+
Malware Config
Signatures
Files
-
6658a9148679b1fe0b1a60ecc747f7d01f31a6c80495e868b7a0209438db69bf.exe windows x86
2b9ac87d5d2c63c781604bed9c380e3a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAddToNameStatusList
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
HeapFree
GetVolumeInformationA
LoadLibraryW
GetCurrentProcess
WideCharToMultiByte
lstrcmpA
MultiByteToWideChar
GetProcessHeap
GetTickCount
GetLocaleInfoA
IsValidLocale
CreateFileA
SetUnhandledExceptionFilter
lstrcpyA
QueryPerformanceCounter
HeapAlloc
GetOEMCP
lstrlenA
GetCurrentProcessId
CloseHandle
GetSystemTimeAsFileTime
FindResourceA
SystemTimeToFileTime
LockResource
SetLastError
GetLocalTime
schannel
QuerySecurityPackageInfoW
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ