Static task
static1
Behavioral task
behavioral1
Sample
65b05c1be1729989c8689b0089f8047718a20aba07f6a65022c9e6257ab17c70.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65b05c1be1729989c8689b0089f8047718a20aba07f6a65022c9e6257ab17c70.exe
Resource
win10v2004-20220812-en
General
-
Target
65b05c1be1729989c8689b0089f8047718a20aba07f6a65022c9e6257ab17c70
-
Size
113KB
-
MD5
20e379b0c0b81391c0e9a22064e3bedb
-
SHA1
06cda9a641c46573ba8eb24b71dbbb0fc55672a9
-
SHA256
65b05c1be1729989c8689b0089f8047718a20aba07f6a65022c9e6257ab17c70
-
SHA512
8def6f4f15e250e4661a4b717545f5b67d436210494fed7b110eb4b52ae48a3c2263bc4f47f48cd9927674d884d3a50e5d4310ca895982099426847afef1ff05
-
SSDEEP
3072:Ado9LFg+d3GCZi+u93XVBR2Nr9hoOVGToadTu:8o9LsvH/Rmo/ToUa
Malware Config
Signatures
Files
-
65b05c1be1729989c8689b0089f8047718a20aba07f6a65022c9e6257ab17c70.exe windows x86
023353eca5f1b57e86427a2ee77b1edf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
TerminateProcess
MultiByteToWideChar
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DeleteFileA
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
HeapDestroy
GetCPInfo
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
ShowWindow
CreateWindowExA
MessageBoxA
ExitWindowsEx
DefWindowProcA
DestroyWindow
PostQuitMessage
RegisterClassExA
LoadIconA
LoadCursorA
advapi32
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
e� Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE