Static task
static1
Behavioral task
behavioral1
Sample
59cc6a0f5b24da38b857732aeac6f487a6820a6f45b2ca287416c9fd67d80a66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59cc6a0f5b24da38b857732aeac6f487a6820a6f45b2ca287416c9fd67d80a66.exe
Resource
win10v2004-20221111-en
General
-
Target
59cc6a0f5b24da38b857732aeac6f487a6820a6f45b2ca287416c9fd67d80a66
-
Size
55KB
-
MD5
34a1993551dc7e73ae7f6cb81671f2c7
-
SHA1
0f7f5b90b247b685ede08e225ac0a3b1738ae4ab
-
SHA256
59cc6a0f5b24da38b857732aeac6f487a6820a6f45b2ca287416c9fd67d80a66
-
SHA512
6a7015de6381a14558a960070159aa1d9a74d0eb64f2689c73875e3f08a548d4bc149bb13e44bcc45615b05b5f9fc72cc0d0a841b7881215795af080cf7fc7ae
-
SSDEEP
768:ajr6Tm1LXVpgmKyCIgewsv4FQ0EMfU6BKVzo4xz8JPoeVRHtE/wxCqev:ajjuZIJwmMHBKrF8JbV1OYxCRv
Malware Config
Signatures
Files
-
59cc6a0f5b24da38b857732aeac6f487a6820a6f45b2ca287416c9fd67d80a66.exe windows x64
fdbf7a96777a0f42158981ea16eb7ce5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
_fmode
_commode
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_cexit
_exit
_c_exit
_XcptFilter
__C_specific_handler
exit
wcscpy
wcscmp
_wcsupr
wcsstr
advapi32
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
kernel32
GetStartupInfoW
GetWindowsDirectoryW
lstrcatW
SetFileAttributesW
RemoveDirectoryW
lstrcpyW
GlobalAlloc
GlobalFree
DeleteFileW
setupapi
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiDeleteDeviceInfo
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vrgqqsk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE