Static task
static1
Behavioral task
behavioral1
Sample
63b5e999bf85e3ed931a7b5d62ac2a5bf9096c1f4583a02bb8526b47b6cad4ba.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
63b5e999bf85e3ed931a7b5d62ac2a5bf9096c1f4583a02bb8526b47b6cad4ba.exe
Resource
win10v2004-20221111-en
General
-
Target
63b5e999bf85e3ed931a7b5d62ac2a5bf9096c1f4583a02bb8526b47b6cad4ba
-
Size
139KB
-
MD5
177db01da3da74245c2d60736e6e28e3
-
SHA1
6d047cd21a35a3bb305a8d3201c243b9e5ee3287
-
SHA256
63b5e999bf85e3ed931a7b5d62ac2a5bf9096c1f4583a02bb8526b47b6cad4ba
-
SHA512
a0985c51d2b5c37acf5987c4b52cddc2126b6f73845c80e79504b333533134bcc77f50c16e96792f1c55c987bc844e6f3bbc5639a4e29cd6c42d404bb0620302
-
SSDEEP
3072:mhGUfLGrD/xnKP2JQvs+qnrcqw5WCWNM:LzQk+qr86N
Malware Config
Signatures
Files
-
63b5e999bf85e3ed931a7b5d62ac2a5bf9096c1f4583a02bb8526b47b6cad4ba.exe windows x86
27cd690abc05ffffef4020fa3a6a44f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetThreadLocale
QueryPerformanceCounter
GetDriveTypeA
GetStartupInfoA
VirtualProtect
GetSystemDefaultLCID
RtlUnwind
GetModuleHandleA
lstrcpynA
msvcrt
_adjust_fdiv
fopen
ungetc
__setusermatherr
__p__commode
_acmdln
_getpid
_pctype
strtol
__getmainargs
log
_CIsqrt
_XcptFilter
__p__fmode
_dup
_wtol
exit
__set_app_type
_lseeki64
_except_handler3
_initterm
pow
user32
IsDialogMessageA
GetIconInfo
TrackPopupMenu
GetWindowTextA
GetCursorPos
CheckMenuItem
RegisterWindowMessageA
WindowFromPoint
GetKeyboardType
oleaut32
SysReAllocStringLen
SysStringLen
GetErrorInfo
ole32
OleInitialize
PropVariantClear
OleSetClipboard
StringFromCLSID
CoTaskMemFree
CLSIDFromProgID
version
VerFindFileW
VerInstallFileW
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
VerLanguageNameA
advapi32
RegSetValueExA
RegOpenKeyW
RegEnumKeyExA
RegOpenKeyA
OpenServiceA
RegCreateKeyExW
RegEnumKeyW
SetSecurityDescriptorOwner
RegDeleteValueW
CryptCreateHash
RegDeleteKeyW
GetLengthSid
DeleteService
FreeSid
CryptAcquireContextA
RegOpenKeyExW
GetTokenInformation
comctl32
ImageList_Create
ImageList_DrawEx
PropertySheetA
InitCommonControls
gdi32
CreateFontW
FillPath
SetDIBits
Arc
CreateBitmap
SetWindowOrgEx
GetObjectType
shell32
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
ExtractAssociatedIconW
SHFileOperationW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ