Static task
static1
Behavioral task
behavioral1
Sample
63d2139516b7e1bb3c3906bc099da70ea9fcdee0f63fd3da610727554dc70818.exe
Resource
win7-20221111-en
General
-
Target
63d2139516b7e1bb3c3906bc099da70ea9fcdee0f63fd3da610727554dc70818
-
Size
128KB
-
MD5
d54dea8ed9dab7eafd46fdf3bb29a181
-
SHA1
1e8109017f47a2f65d928c8b1e2b6810c81b68dd
-
SHA256
63d2139516b7e1bb3c3906bc099da70ea9fcdee0f63fd3da610727554dc70818
-
SHA512
2f9cf7148e6737a3693df269473108d691377154cd6f4538cf509da2ded5f7df3506e64d0a8f8435a554902d32d9c8a3c19a91eb257f49bb5a3abf4536dbfbb7
-
SSDEEP
3072:2u8KrhDaM0J1yzN5VD6oQ3VKYaLuKqMsB1Iros0:2u8KrhDaMsyzNrD3WK3DUBts0
Malware Config
Signatures
Files
-
63d2139516b7e1bb3c3906bc099da70ea9fcdee0f63fd3da610727554dc70818.exe windows x86
73d1b953940886ebdb0bbfb33ba29e24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoInitialize
CoCreateInstance
kernel32
GetVolumeInformationA
GetModuleHandleA
DeleteFileA
SetFileAttributesA
CloseHandle
WaitForSingleObject
CreateProcessA
SetEvent
GetFileAttributesA
GetTimeFormatA
GetDateFormatA
GetLocalTime
SearchPathA
ResetEvent
FreeLibrary
LoadLibraryA
GetProcAddress
IsBadWritePtr
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
DeviceIoControl
EnterCriticalSection
CreateEventA
GetCurrentProcess
GetLastError
GetSystemDirectoryA
GetVersionExA
lstrcmpiA
GetDriveTypeA
GetUserDefaultLangID
GetModuleFileNameA
QueryDosDeviceA
GetStartupInfoA
LeaveCriticalSection
user32
DialogBoxParamA
IsDlgButtonChecked
SetWindowPos
wsprintfA
MessageBoxA
LoadStringA
ExitWindowsEx
EnableWindow
EndDialog
GetDlgItem
SetWindowTextA
ShowWindow
CheckDlgButton
advapi32
RegDeleteKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyA
RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
OpenProcessToken
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shell32
ShellExecuteExA
comdlg32
GetOpenFileNameA
msvcrt
strtok
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memcpy
_initterm
__CxxFrameHandler
free
memset
strcpy
malloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
strcat
strrchr
strstr
sprintf
strcmp
strchr
_splitpath
atoi
_strnicmp
_stricmp
strncpy
strncmp
_purecall
strlen
toupper
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
winmm
timeGetTime
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ardata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE