Static task
static1
Behavioral task
behavioral1
Sample
b66e3e78bd19610dd9472a7f1b710e2a294cf553aa63d35c0c057643a1f28e6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b66e3e78bd19610dd9472a7f1b710e2a294cf553aa63d35c0c057643a1f28e6c.exe
Resource
win10v2004-20221111-en
General
-
Target
b66e3e78bd19610dd9472a7f1b710e2a294cf553aa63d35c0c057643a1f28e6c
-
Size
337KB
-
MD5
18d962bd5395803bc4c64d8ea7bc0502
-
SHA1
e0a9b7fe52653d5d9ee0a7f853a702070f12975c
-
SHA256
b66e3e78bd19610dd9472a7f1b710e2a294cf553aa63d35c0c057643a1f28e6c
-
SHA512
6f4508eeb3a2186e98a58334157aa88a370f84f811103686fb1d93ce62f6e4004e219c00ee9bc12069815e4882cedf580e5ea5e428593c37679f8cb791264d17
-
SSDEEP
6144:+gs6aZaeekKozTCUaNt17hMQeyQmZoKswSqsK4NXkv:+gs7Uee9ozOUABhMQelmZVsrqB42
Malware Config
Signatures
Files
-
b66e3e78bd19610dd9472a7f1b710e2a294cf553aa63d35c0c057643a1f28e6c.exe windows x86
913b972983b88c0c540c16cd050fb790
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
ResumeThread
CreateFileA
LoadLibraryA
GetLastError
VirtualFree
VirtualAlloc
GetModuleHandleA
GetSystemTime
Sleep
ReadFile
FlushViewOfFile
MapViewOfFile
GetFileSize
GlobalFree
WriteFile
GlobalAlloc
CopyFileA
SuspendThread
FreeResource
ExitProcess
LockResource
LoadResource
VirtualProtect
GetProcAddress
SetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapCreate
HeapDestroy
GetStringTypeW
GetFileType
GetStdHandle
SetHandleCount
CreateThread
CloseHandle
HeapFree
SizeofResource
WaitForMultipleObjects
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
user32
CreateWindowExA
GetClientRect
DefWindowProcA
RegisterClassExA
GetDC
LoadStringA
GetDesktopWindow
UpdateWindow
LoadIconA
LoadCursorA
GetIconInfo
ReleaseDC
IsWindow
GetWindowLongA
ShowWindow
gdi32
CreatePenIndirect
DeleteObject
CreateCompatibleBitmap
GetDIBits
ole32
CoCreateInstance
CoUninitialize
lz32
LZOpenFileA
pdh
PdhAddCounterA
PdhOpenQueryA
PdhCollectQueryData
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 255KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE