Static task
static1
Behavioral task
behavioral1
Sample
66e5cf3d6a6daa583e791ce96b68f50e993e489fe263e44ccd92c3272410fc6d.exe
Resource
win7-20220812-en
General
-
Target
66e5cf3d6a6daa583e791ce96b68f50e993e489fe263e44ccd92c3272410fc6d
-
Size
92KB
-
MD5
0f0dccca6befc48aa2495d56aa2fe7b1
-
SHA1
124bc764ff72b166b65eabc7e64f7a163462283c
-
SHA256
66e5cf3d6a6daa583e791ce96b68f50e993e489fe263e44ccd92c3272410fc6d
-
SHA512
82f9734a4bbdd9f739973fc052abe5eda744399521ae8f671cd152c4d6c5c231adb06dc2d8ccdbe9380ded051dd7905a6ea46e3ef152e6ecbecae12c9bb003d6
-
SSDEEP
1536:eZg7R2K6R9Et7nhWfJkAYEUShZOe+fYqbCJQOTKW49R/LgJ/Cj+b20ruMk60:mUR2KCczgfJ/UHgqblOG9xgJ/1nFk60
Malware Config
Signatures
Files
-
66e5cf3d6a6daa583e791ce96b68f50e993e489fe263e44ccd92c3272410fc6d.exe windows x86
4765ed72de381d4d8a9f41a39835bf25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__getmainargs
_except_handler3
exit
_c_exit
_stricmp
__setusermatherr
_adjust_fdiv
__set_app_type
__p__fmode
_acmdln
_ltoa
_cexit
_XcptFilter
_exit
_strnicmp
_initterm
malloc
strtok
atol
free
strchr
__p__commode
kernel32
CloseHandle
GetModuleHandleA
WaitForSingleObject
WideCharToMultiByte
GetTimeZoneInformation
LoadLibraryA
lstrlenA
GetStartupInfoA
GetProcAddress
FreeLibrary
CreateEventA
lstrcmpiA
user32
wsprintfA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysFreeString
advapi32
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
cfgmgr32
CM_Get_DevNode_Registry_PropertyA
CM_Get_Device_ID_ListA
CM_Get_Device_ID_List_SizeA
CM_Get_DevNode_Status
CM_Open_DevNode_Key
CM_Locate_DevNodeA
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE