Static task
static1
Behavioral task
behavioral1
Sample
65d15e7baa6a9f376825f223d3addb0140af0c73d7e080a8da68e63f2118589f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65d15e7baa6a9f376825f223d3addb0140af0c73d7e080a8da68e63f2118589f.exe
Resource
win10v2004-20220812-en
General
-
Target
65d15e7baa6a9f376825f223d3addb0140af0c73d7e080a8da68e63f2118589f
-
Size
68KB
-
MD5
49793563bba0cb8a850bd205eb86010d
-
SHA1
98797c3b8fd0caefe3532ef81393c1efd3f203fc
-
SHA256
65d15e7baa6a9f376825f223d3addb0140af0c73d7e080a8da68e63f2118589f
-
SHA512
dbeb75acabf55a0563a87935f7163383dfe4aff25656da2733d4fb34c86632cf37005529b9fc910dae56357472ef54b1c7259d7e085271e06f556f9c24e825b8
-
SSDEEP
768:U5EGaqgbxz4ByfbwDewT9CZ1Xi0SoCj9q/MlathW:U5SbaBQ3wT9C7jUj9BkthW
Malware Config
Signatures
Files
-
65d15e7baa6a9f376825f223d3addb0140af0c73d7e080a8da68e63f2118589f.exe windows x86
2aee59b9512f54f72c494e27444f9dd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
HeapAlloc
SetWaitableTimer
HeapFree
WaitForSingleObject
CreateWaitableTimerW
GetModuleHandleW
GetTickCount
GetProcessHeap
CloseHandle
GlobalAlloc
ReadFile
ExitProcess
GetModuleFileNameW
CreateFileW
HeapSize
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetVersionExA
GetStartupInfoW
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
user32
SendMessageW
BeginPaint
UpdateWindow
TranslateMessage
DefWindowProcW
LoadAcceleratorsW
RegisterClassExW
DispatchMessageW
LoadIconW
EndPaint
EndDialog
DestroyWindow
LoadStringW
TranslateAcceleratorW
GetMessageW
ShowWindow
PostQuitMessage
DialogBoxParamW
CreateWindowExW
LoadCursorW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ