Static task
static1
Behavioral task
behavioral1
Sample
863b38994b646debce925038455d1832aad15a42d37de2abf3cf112f2fd7c9cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
863b38994b646debce925038455d1832aad15a42d37de2abf3cf112f2fd7c9cb.exe
Resource
win10v2004-20220812-en
General
-
Target
863b38994b646debce925038455d1832aad15a42d37de2abf3cf112f2fd7c9cb
-
Size
664KB
-
MD5
d0da0a05b202ff222ffc57a0fd456b1c
-
SHA1
ae7727deaa23e59b2d31c6aa7a5c60987fba5205
-
SHA256
863b38994b646debce925038455d1832aad15a42d37de2abf3cf112f2fd7c9cb
-
SHA512
fa4b2d90564a030505acc77fa485092aa071e0b9ae953023b30cb4a7b012083f0d24b02bd11e996fe8a3e37ea0f442ba54a465ba03d059c868518fdc08bea035
-
SSDEEP
12288:Qp45GazZTC5JYKW8ZOaLLKUDDaTE/Gily8dQ4xgQX:hDzZTCu8VLhD+MGil1Jxl
Malware Config
Signatures
Files
-
863b38994b646debce925038455d1832aad15a42d37de2abf3cf112f2fd7c9cb.exe windows x86
d0646b0019afa9367ec2c91b2b0e6594
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
Sleep
VirtualFree
RemoveDirectoryA
ResumeThread
HeapAlloc
GetProcessHeap
DeleteFileA
GetProcAddress
LoadLibraryExA
SetEvent
GetModuleHandleA
GetSystemInfo
VirtualProtect
WaitForSingleObject
SuspendThread
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetLocaleInfoA
VirtualQuery
ws2_32
recv
avifil32
AVIMakeStreamFromClipboard
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 600KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ