Static task
static1
Behavioral task
behavioral1
Sample
691be2154d5642546526ea329d356ae61e9f0f3d481cfccfe52bfed9135cd924.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
691be2154d5642546526ea329d356ae61e9f0f3d481cfccfe52bfed9135cd924.exe
Resource
win10v2004-20220901-en
General
-
Target
691be2154d5642546526ea329d356ae61e9f0f3d481cfccfe52bfed9135cd924
-
Size
257KB
-
MD5
83d76a8ebc4a12cdc61d2193e69959a4
-
SHA1
9f5bb8dfde6b47ab0409d696587a4087ad5412fd
-
SHA256
691be2154d5642546526ea329d356ae61e9f0f3d481cfccfe52bfed9135cd924
-
SHA512
a3fabd19890fb3b400ade22a30c9f70ee9422e33f5cc89141866c3ea0caf792fe3c910f1a48060a8adcfd728908e43c2001675b858d5968e681afa782b2e34a9
-
SSDEEP
6144:sygNAY21YpPPuLM775WvswQ7XAaWFG/wBC+P5G:sygNAxY5nVWvuZwvBM
Malware Config
Signatures
Files
-
691be2154d5642546526ea329d356ae61e9f0f3d481cfccfe52bfed9135cd924.exe windows x86
922ad51602f5ecd996a82ffb57ba3e1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
HeapFree
LoadLibraryW
lstrcpyW
GetCommandLineW
lstrlenW
DeleteCriticalSection
GetSystemDirectoryW
lstrlenA
WriteFile
GetCurrentProcess
GlobalFree
ExpandEnvironmentStringsW
IsBadWritePtr
CloseHandle
GetStartupInfoW
FindClose
LoadLibraryA
GetProcAddress
WaitForSingleObject
GetModuleHandleW
user32
DestroyWindow
gdi32
PatBlt
ExtTextOutW
GetDeviceCaps
GetTextMetricsW
DeleteDC
GetStockObject
BitBlt
GetObjectW
PtVisible
PtInRegion
FillRgn
ws2_32
connect
select
closesocket
shutdown
send
WSAStartup
recv
ioctlsocket
msvcrt
tolower
wcschr
exit
wcsstr
wcslen
iswdigit
wcstoul
wcsrchr
wcscpy
swscanf
vswprintf
malloc
wcscmp
realloc
swprintf
toupper
wcsncpy
iswspace
wcstol
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 216KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ