Static task
static1
Behavioral task
behavioral1
Sample
67297e55f6f76d9c4c8f24f8cb16de2c8f44f4fbeaeac8164c2f03d2dd76e905.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67297e55f6f76d9c4c8f24f8cb16de2c8f44f4fbeaeac8164c2f03d2dd76e905.exe
Resource
win10v2004-20220812-en
General
-
Target
67297e55f6f76d9c4c8f24f8cb16de2c8f44f4fbeaeac8164c2f03d2dd76e905
-
Size
66KB
-
MD5
9c2527bca9a729129b7d71dfeb5dfbe2
-
SHA1
a4c30a915a09eb08de3922b33769f2bf511122ae
-
SHA256
67297e55f6f76d9c4c8f24f8cb16de2c8f44f4fbeaeac8164c2f03d2dd76e905
-
SHA512
789dd9ee309862af047827bc09e1ca33746b107621f7067ee81f0e1c2d898e3065963f557aefef17299985ac0bd8399d78e29b60537895e85f27520e5e813f93
-
SSDEEP
1536:U431MIGRaEWBVUru+eknhh0OYl3/klYux+flfTcUB:HY9WBXknhh0f/eYplbp
Malware Config
Signatures
Files
-
67297e55f6f76d9c4c8f24f8cb16de2c8f44f4fbeaeac8164c2f03d2dd76e905.exe windows x86
b7d27af8015aa5ea7931fec4527985e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
GlobalFindAtomA
GetProcessId
WaitForMultipleObjectsEx
SetUserGeoID
AddLocalAlternateComputerNameW
HeapExtend
LoadLibraryA
GetConsoleAliasExesW
GetEnvironmentStrings
LZCopy
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE