Static task
static1
Behavioral task
behavioral1
Sample
59b6cdeee0373d98ff1d42632bdb8dff9b7ede17231ee9035e9c7165ee005497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59b6cdeee0373d98ff1d42632bdb8dff9b7ede17231ee9035e9c7165ee005497.exe
Resource
win10v2004-20220901-en
General
-
Target
59b6cdeee0373d98ff1d42632bdb8dff9b7ede17231ee9035e9c7165ee005497
-
Size
275KB
-
MD5
1356a175b1e894393ee5c06c3e5e2570
-
SHA1
b92bb1c85c3a0ac195804aaf54b275dd1ed3d192
-
SHA256
59b6cdeee0373d98ff1d42632bdb8dff9b7ede17231ee9035e9c7165ee005497
-
SHA512
90f1e27df940ca1a9d26644e74df378cd92aaf8e8d6ca0434f09cf7b1811a909ecedf46d60c6ced60c817da9036d3670aac5bf645202c177e978ba5a6ffb28bd
-
SSDEEP
6144:RE0BKe/wguJpVopIM/eiG3cE9bAxsfW7q8:LBK/jJ7oaz33O6eP
Malware Config
Signatures
Files
-
59b6cdeee0373d98ff1d42632bdb8dff9b7ede17231ee9035e9c7165ee005497.exe windows x86
b3665d086cb6f4f9a12d6c55ced1be69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFiber
GetLinguistLangSize
RegisterWaitForInputIdle
CompareStringA
WriteConsoleInputA
RestoreLastError
ConvertDefaultLocale
CreateEventW
VirtualProtect
_hread
GetCurrencyFormatA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE