Static task
static1
Behavioral task
behavioral1
Sample
656ceb7da4fe0ce466a466c7694bc76ffd11279a5c73d0c245f3d7cf30b317e2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
656ceb7da4fe0ce466a466c7694bc76ffd11279a5c73d0c245f3d7cf30b317e2.exe
Resource
win10v2004-20221111-en
General
-
Target
656ceb7da4fe0ce466a466c7694bc76ffd11279a5c73d0c245f3d7cf30b317e2
-
Size
1.3MB
-
MD5
05a9db17d749172ecf3c5a536197cb04
-
SHA1
8d8a7adc1c989a9912325328a7413d337cc1af26
-
SHA256
656ceb7da4fe0ce466a466c7694bc76ffd11279a5c73d0c245f3d7cf30b317e2
-
SHA512
ae449352ae5b3a10e66941d3d424f7dee10232485951d8d947e0fedab7f5b01e3bc86d9af802b2d8fe13a02da32a4c2202fe8adb426e8fe72dc9e3c05701fcea
-
SSDEEP
24576:RYDKskh4+Mp5PPZHynkKCSeDBonjobGU+lITP8mBET181ZEzzyEXfntKhZN:RYDKP4+Mp5PPAoBKU+lOrBEBAmzy40h3
Malware Config
Signatures
Files
-
656ceb7da4fe0ce466a466c7694bc76ffd11279a5c73d0c245f3d7cf30b317e2.exe windows x86
1ef898439e226340c0fdf3bf32fe9bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
HeapValidate
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 49KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 9KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE