Static task
static1
Behavioral task
behavioral1
Sample
265169636c027f1509f189b49ffa571f4d91b7f890b68cf3b3bef93fe004c264.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
265169636c027f1509f189b49ffa571f4d91b7f890b68cf3b3bef93fe004c264.exe
Resource
win10v2004-20220812-en
General
-
Target
265169636c027f1509f189b49ffa571f4d91b7f890b68cf3b3bef93fe004c264
-
Size
84KB
-
MD5
65f6b2ca60446b87885c645c3c6c3e58
-
SHA1
b917b1c35f0ffe24058fccddb4190dcfcf52cc5b
-
SHA256
265169636c027f1509f189b49ffa571f4d91b7f890b68cf3b3bef93fe004c264
-
SHA512
4a5bc5ed5095af354be082f7721c7bd887649790222b6cda5d6affd850492763dc620f43349e9be0eff2a6a0aac2c9c1fe33295263925479976ae0e7edbb7ce1
-
SSDEEP
768:pUpoxqH8ymhnf9aUT1I37Z/IjfpIwU1aJwrCnCQIi0cn6DaB7XfY8nRTbJcNxcm3:epzH8yWlaUJs/UOD1aeC6O62XQURTdc
Malware Config
Signatures
Files
-
265169636c027f1509f189b49ffa571f4d91b7f890b68cf3b3bef93fe004c264.exe windows x86
c482e29a7fb901d1ac42bae20378c7fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
ReadFile
GetFileSize
CloseHandle
CreateFileA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
GetStdHandle
GetLastError
SetEndOfFile
Sleep
SetConsoleCursorInfo
GetConsoleCursorInfo
FindClose
FindNextFileA
FindFirstFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetEnvironmentVariableA
CompareStringW
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
HeapFree
GetFileAttributesA
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetFullPathNameA
GetCurrentDirectoryA
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
GetFileType
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
HeapSize
GetLocaleInfoA
LoadLibraryA
FlushFileBuffers
RtlUnwind
CompareStringA
WriteConsoleA
wsock32
WSACleanup
gethostbyname
gethostname
WSAStartup
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE