Static task
static1
Behavioral task
behavioral1
Sample
c664ce95c06f1bd84b74e4a0c11e97885819ed950682d67e33ffa18b738c5c8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c664ce95c06f1bd84b74e4a0c11e97885819ed950682d67e33ffa18b738c5c8c.exe
Resource
win10v2004-20220812-en
General
-
Target
c664ce95c06f1bd84b74e4a0c11e97885819ed950682d67e33ffa18b738c5c8c
-
Size
132KB
-
MD5
0b9b5db59d976675e95260f4399db850
-
SHA1
a65149cf7431d589633ef133ed3e6c4624e8dcc7
-
SHA256
c664ce95c06f1bd84b74e4a0c11e97885819ed950682d67e33ffa18b738c5c8c
-
SHA512
34e9aa8dca6aa31547186d57ac0ebd9ce3d6e093da1aec16a619239b065ffe3d470c1bdbf2b41f01db908f8984180508e873163f370a64454b8d2229805b4ecd
-
SSDEEP
768:6DUvW7yIOXAoAoZIsGgowYEVhoDTcs4Su4Q:/vWWKoPGgvYELosl4Q
Malware Config
Signatures
Files
-
c664ce95c06f1bd84b74e4a0c11e97885819ed950682d67e33ffa18b738c5c8c.exe windows x86
17aec40c5adf5937056805eaf3c786f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
ReadFile
GetModuleHandleW
OpenEventW
VirtualFree
Sleep
VirtualAlloc
OpenMutexW
GetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetTickCount
TerminateProcess
RemoveDirectoryW
InterlockedExchange
WriteFile
RtlUnwind
HeapFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
LoadBitmapA
LoadCursorA
EnableWindow
SendMessageW
PostMessageW
ShowWindow
ReleaseDC
gdi32
CreatePen
SelectObject
CreateBitmap
ole32
CoCreateGuid
CoUninitialize
oleaut32
SysAllocString
winscard
SCardForgetReaderW
ws2_32
select
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ