Static task
static1
Behavioral task
behavioral1
Sample
63a7c3fab2ab271616ce71fb6d26116b3fdba47353d723fade60b16b5a4b88ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
63a7c3fab2ab271616ce71fb6d26116b3fdba47353d723fade60b16b5a4b88ca.exe
Resource
win10v2004-20220901-en
General
-
Target
63a7c3fab2ab271616ce71fb6d26116b3fdba47353d723fade60b16b5a4b88ca
-
Size
824KB
-
MD5
836d5740083bcbb177a14d545d3b0a50
-
SHA1
b320ea94112fa49c59f7f86989976d3dd8c81278
-
SHA256
63a7c3fab2ab271616ce71fb6d26116b3fdba47353d723fade60b16b5a4b88ca
-
SHA512
51d1b10148d34d34086bde56f31b5d0717153de5e3cef0199a3031f4c63927e9e83c65a753504694455807de1c2a2cca6d3c5fcf73a3d9d725db70c4b6b40f5e
-
SSDEEP
24576:DrrrrrrrrrrrrrrrrrrrrrrrXQOkKMR9/SqMh0/XKkgfhaDUGE0ZkkQv:Drrrrrrrrrrrrrrrrrrrrrrr8Kr1gXiq
Malware Config
Signatures
Files
-
63a7c3fab2ab271616ce71fb6d26116b3fdba47353d723fade60b16b5a4b88ca.exe windows x86
985693ee78d55ee1adbc25f70c8f2c2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
GetFileAttributesW
WriteConsoleW
CopyFileW
GetConsoleTitleA
VirtualAllocEx
GetVolumeInformationW
WaitForSingleObject
GetEnvironmentVariableW
CreateDirectoryW
GetTimeFormatW
SetConsoleTitleA
OpenMutexA
GetDriveTypeW
CreateEventA
GetLongPathNameA
GetModuleHandleA
msoeacct
ValidEmailAddress
HrCreateAccountManager
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.kdata Size: 804KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE