Static task
static1
Behavioral task
behavioral1
Sample
66c03526333b569d20fe3ca3c76bb3c16b876066a5feeb7f4d9fbce6482f7b8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66c03526333b569d20fe3ca3c76bb3c16b876066a5feeb7f4d9fbce6482f7b8f.exe
Resource
win10v2004-20221111-en
General
-
Target
66c03526333b569d20fe3ca3c76bb3c16b876066a5feeb7f4d9fbce6482f7b8f
-
Size
312KB
-
MD5
98e50cda2c297b841e1218f097d571fe
-
SHA1
d64e115493f5f6135d3f90ce8a8c71dcd72efafd
-
SHA256
66c03526333b569d20fe3ca3c76bb3c16b876066a5feeb7f4d9fbce6482f7b8f
-
SHA512
6848a611bf6fcaad1f436b31c7b4861b13384ebbe631c7d19c5515a6250ef5b4e81077fc3f1e8f1eeb5bd6e16cb7152583570fdb273ebe18e1c8d46d02f19cf8
-
SSDEEP
6144:q4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:q4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
66c03526333b569d20fe3ca3c76bb3c16b876066a5feeb7f4d9fbce6482f7b8f.exe windows x86
4c850728769b4bf9b985e3b8965feb18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
GetSystemDirectoryA
FreeEnvironmentStringsA
IsDebuggerPresent
VirtualProtect
OpenSemaphoreA
InterlockedExchange
HeapCreate
RaiseException
GetModuleHandleA
GetCompressedFileSizeA
GetStdHandle
GetCurrentProcess
GetCurrentProcessId
GetLocaleInfoA
FlushFileBuffers
GlobalFree
SetEvent
GetCommandLineA
GetACP
GetCurrentThread
user32
FillRect
GetCursorPos
wsprintfA
SetForegroundWindow
DrawTextA
ValidateRgn
IsIconic
SetActiveWindow
BeginPaint
GetFocus
GetWindowTextLengthA
ShowWindow
GetClassNameA
EndPaint
GetWindow
ReleaseDC
GetParent
FrameRect
GetDlgItem
linkinfo
GetCanonicalPathInfoA
ResolveLinkInfoA
GetLinkInfoData
DestroyLinkInfo
IsValidLinkInfo
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ