Static task
static1
Behavioral task
behavioral1
Sample
64531126f6ba98efd096ce1128e855d7e889efcc797b185e4c92e29d82c0d15f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64531126f6ba98efd096ce1128e855d7e889efcc797b185e4c92e29d82c0d15f.exe
Resource
win10v2004-20220812-en
General
-
Target
64531126f6ba98efd096ce1128e855d7e889efcc797b185e4c92e29d82c0d15f
-
Size
273KB
-
MD5
0f490d7c1c9d4af394715383ac33be66
-
SHA1
c8198ffd06141bb40e39b3a3cb507ae32b57b6d6
-
SHA256
64531126f6ba98efd096ce1128e855d7e889efcc797b185e4c92e29d82c0d15f
-
SHA512
04c75b95c7375bdf6db129e86d5b7851037eafa8f008357eb914e02c542d2f829f142fedd23f5db81ac4583408dc7aa70991a7e62da80eafde35885a5c8437b9
-
SSDEEP
6144:PkXBcaAXzvcwPQJKys6sZ/ueeDddq2ryxeGAcU1jhDj:Pkm3LcCBy5NDKHxeGAcI
Malware Config
Signatures
Files
-
64531126f6ba98efd096ce1128e855d7e889efcc797b185e4c92e29d82c0d15f.exe windows x86
a42e4f4b8ef1cfbf9528a1e3f5e7c9b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetStringTypeA
GetSystemInfo
LCMapStringW
GetProcAddress
GetTimeFormatA
HeapReAlloc
MultiByteToWideChar
GetWindowsDirectoryW
GetFileType
GetCurrentProcessId
SetHandleCount
GetVersionExA
FreeEnvironmentStringsW
SetLastError
VirtualFree
GetTimeZoneInformation
GlobalAddAtomA
TlsAlloc
VirtualProtect
GetCommandLineA
TlsSetValue
GetAtomNameW
GetOEMCP
HeapCreate
GlobalUnfix
GetEnvironmentStrings
GetDriveTypeW
GetProfileSectionW
ExitProcess
GetTickCount
ExitThread
SetEnvironmentVariableA
HeapFree
DeleteCriticalSection
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryA
QueryPerformanceCounter
CompareStringW
VirtualAlloc
TlsGetValue
GetNamedPipeHandleStateA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
EnterCriticalSection
GetACP
GetCurrentThread
IsValidCodePage
TlsFree
GetStringTypeW
SystemTimeToFileTime
GetSystemTimeAsFileTime
EnumSystemLocalesA
UnlockFile
TransactNamedPipe
FreeEnvironmentStringsA
GetCPInfo
FlushFileBuffers
LCMapStringA
HeapDestroy
WriteFile
SetConsoleTitleW
GetCommandLineW
IsValidLocale
GetCurrencyFormatW
GetStdHandle
LeaveCriticalSection
GetDateFormatA
GlobalAlloc
InterlockedExchange
GetLastError
WideCharToMultiByte
CompareStringA
HeapSize
LocalFileTimeToFileTime
GetSystemDefaultLCID
GetUserDefaultLCID
GetStartupInfoW
HeapAlloc
IsBadWritePtr
GetCurrencyFormatA
lstrlenW
GetStartupInfoA
VirtualQuery
GetModuleHandleA
InitializeCriticalSection
GetEnvironmentStringsW
GetModuleFileNameW
user32
EnumDisplaySettingsA
EnumPropsExW
DrawStateW
FindWindowW
UnhookWinEvent
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ