Static task
static1
Behavioral task
behavioral1
Sample
MineSweeper_v1.1_x64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MineSweeper_v1.1_x64.exe
Resource
win10v2004-20220812-en
General
-
Target
MineSweeper_v1.1_x64.exe
-
Size
18KB
-
MD5
059a3d493d95fc098ecf615c92bdf0cc
-
SHA1
b89af69dc5c9d33bb79daa82113c957698fb0111
-
SHA256
004222357c1e03be16442d6ebbd833c4bc83cdf6d5c808169ba3a298225737f7
-
SHA512
c83264ddfde0f7c07b49f4b1834540d1e0d233fdd759e4a8de6737533f157a557d57368bab2794f88d57f2b33cde0f71698662017c99ef5dbef5fabf40862c52
-
SSDEEP
384:hF2LKV4XZ+1d4PRj6aTgU0rLI6zRdhq74nlBm1kY6d2RcIgeXabrS:DUKV4XZmd4PRj6aTgU0vIYRdhK4nSV6l
Malware Config
Signatures
Files
-
MineSweeper_v1.1_x64.exe.exe windows x64
fbebd4da8548141d4465e18d0bbf494a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
memset
malloc
wcsrchr
free
wcsstr
wcscat_s
printf
wcstoul
strcmp
kernel32
LocalFree
VirtualQueryEx
MapViewOfFile
CreateFileMappingW
K32GetMappedFileNameW
GetCurrentProcessId
ReadProcessMemory
CloseHandle
WriteProcessMemory
SetLastError
GetCommandLineW
GetCurrentProcess
GetModuleFileNameW
LocalAlloc
OpenProcess
VirtualProtectEx
GetLastError
CreateFileW
UnmapViewOfFile
K32EnumProcessModulesEx
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ