Static task
static1
Behavioral task
behavioral1
Sample
c68694c9276d96e45f76ad542211d3ad968f0647973a866c665b43a88fb722ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c68694c9276d96e45f76ad542211d3ad968f0647973a866c665b43a88fb722ee.exe
Resource
win10v2004-20221111-en
General
-
Target
c68694c9276d96e45f76ad542211d3ad968f0647973a866c665b43a88fb722ee
-
Size
164KB
-
MD5
4d97da041933f14ea5f9f618d553a4f7
-
SHA1
5bfb6bdb4adb284eef6d11f0c90d1aad20d7ff2f
-
SHA256
c68694c9276d96e45f76ad542211d3ad968f0647973a866c665b43a88fb722ee
-
SHA512
ad69806964f1eb55acff53076a22fe088376dfaf1c001077a28dc5c0c7f4c345880d233f02502a1183fe6c7dcfc0f57123a26ccd7b287ec8a2f9e6eb3a5ee8ab
-
SSDEEP
3072:vXLquT2JgK5xhW99scgS9CF4m2wz+lbvAmRgHVAUjmTUjGdpCZGz6an:vXigKpW9hNh5AmRgyUjZj2pmda
Malware Config
Signatures
Files
-
c68694c9276d96e45f76ad542211d3ad968f0647973a866c665b43a88fb722ee.exe windows x86
18b7ac4aaa157edef3541a0745c3a9ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetProcessHeap
Sleep
GetProcAddress
LoadLibraryA
AddVectoredExceptionHandler
HeapAlloc
CloseHandle
InterlockedDecrement
InterlockedExchange
HeapCreate
GetModuleHandleA
InterlockedIncrement
user32
DestroyWindow
CharLowerW
DefWindowProcW
UnregisterClassW
GetWindowLongA
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ