Static task
static1
Behavioral task
behavioral1
Sample
66ab5c0217842d039d59a84639da3efb4e13e8d6f9e9dd55aeb7a1acedc72aa1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
66ab5c0217842d039d59a84639da3efb4e13e8d6f9e9dd55aeb7a1acedc72aa1.exe
Resource
win10v2004-20220812-en
General
-
Target
66ab5c0217842d039d59a84639da3efb4e13e8d6f9e9dd55aeb7a1acedc72aa1
-
Size
62KB
-
MD5
08be6d0d907a6e36aeef585f2405d6d7
-
SHA1
9569f07040007e64901819e3f29263201bf100e3
-
SHA256
66ab5c0217842d039d59a84639da3efb4e13e8d6f9e9dd55aeb7a1acedc72aa1
-
SHA512
001c8d51af9cc5921624efec51e5bbc0a50ce594ba16854b036d8b3621d307003076ed997d04ec28b9af2cc7bdb662b70908788c5525d412e14a1e9989d620a8
-
SSDEEP
1536:l+leAbekJQ2dfh+6TE7MWfDy3G/FzcKXTlOAE:43i6pJTE7pMGdgKXTE
Malware Config
Signatures
Files
-
66ab5c0217842d039d59a84639da3efb4e13e8d6f9e9dd55aeb7a1acedc72aa1.exe windows x86
9ca6e472f647176f874af9ff56886a60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
CancelIo
GetStartupInfoA
CloseHandle
GetEnvironmentVariableA
VirtualQuery
HeapCreate
GetVolumePathNameA
CloseHandle
GetTimeFormatA
TlsGetValue
FindResourceW
GetCommandLineA
HeapDestroy
GetModuleHandleA
Sleep
ResetEvent
GetCommandLineA
lstrlenA
CreateEventA
user32
GetClassInfoA
CreateIcon
DestroyMenu
CallWindowProcA
DrawTextW
GetWindowLongA
GetSysColor
FindWindowA
IsWindow
PeekMessageA
DispatchMessageA
DispatchMessageA
IsZoomed
psbase
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tjifjkf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE