Static task
static1
Behavioral task
behavioral1
Sample
c064403d99bc40a552dd5fcbd0baa1b7416677e107abe665351168672fd3d68e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c064403d99bc40a552dd5fcbd0baa1b7416677e107abe665351168672fd3d68e.exe
Resource
win10v2004-20221111-en
General
-
Target
c064403d99bc40a552dd5fcbd0baa1b7416677e107abe665351168672fd3d68e
-
Size
115KB
-
MD5
56bd6e89b96ef36378c4ea14c145cd40
-
SHA1
3ffe42ed0abd2f672fdef6588df42aa14b0613a2
-
SHA256
c064403d99bc40a552dd5fcbd0baa1b7416677e107abe665351168672fd3d68e
-
SHA512
085188876bb5a8bae61c3d6fe03ee901da73455a240102c33382d75cc5c186f3e58a4f6684c9d13157a64b473c410de87bce381ca969d7ecda56da6509619a55
-
SSDEEP
1536:kEQsoO2cNuW41k06rKxj8p5N82bIbckpg0LKE5arUqw7CKM73TqoZj5aqhZmS:kTcoW0kcoDNvezg07QrvioV5aQw
Malware Config
Signatures
Files
-
c064403d99bc40a552dd5fcbd0baa1b7416677e107abe665351168672fd3d68e.exe windows x86
1b4ab4f549be35ce5f5d60bb0b1b4d8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
GetStartupInfoA
CloseHandle
CreatePipe
WriteConsoleW
DisconnectNamedPipe
GetLastError
GetPriorityClass
GetFileAttributesA
IsValidLocale
lstrlenW
GetModuleHandleA
lstrcpyW
IsBadStringPtrA
GetCurrentDirectoryA
IsBadCodePtr
ReleaseMutex
HeapCreate
WriteConsoleW
WriteConsoleW
CopyFileW
msftedit
RichEditWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
ShellMessageBoxA
ShellMessageBoxA
StrChrA
DragAcceptFiles
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetMalloc
ShellAboutA
DuplicateIcon
SHGetMalloc
SHGetSettings
ExtractIconA
SHGetDiskFreeSpaceA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ