Static task
static1
Behavioral task
behavioral1
Sample
af5fd807abda36ac3f70939af17cd0cdac58e0c32dcfcb64789249f1a045493f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af5fd807abda36ac3f70939af17cd0cdac58e0c32dcfcb64789249f1a045493f.exe
Resource
win10v2004-20220812-en
General
-
Target
af5fd807abda36ac3f70939af17cd0cdac58e0c32dcfcb64789249f1a045493f
-
Size
84KB
-
MD5
6ee5329e7653bf2c32e80abb384996c2
-
SHA1
398469abd63005aa63f142fe2207e7537a8f9c2e
-
SHA256
af5fd807abda36ac3f70939af17cd0cdac58e0c32dcfcb64789249f1a045493f
-
SHA512
30f04ca38001a3be7a2e97b927372a2bf77ccab25e9b6dd6f3487c6a4d5374eefd710db5664a3e7b8141ecd7d2e7bebe18273523c8d69bcdc50fb9996eedb3a6
-
SSDEEP
1536:6BcRYoNxtybFwWeZr3q9+LpFBiR+F5Qeu+aDug3a:6auaxk+3Zr60LsRgie8q
Malware Config
Signatures
Files
-
af5fd807abda36ac3f70939af17cd0cdac58e0c32dcfcb64789249f1a045493f.exe windows x86
2a48fcaf6abc26b9043ea6baa8fd9fd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetFileAttributesA
HeapSize
ExitProcess
ResetEvent
CloseHandle
GetTickCount
GetModuleHandleA
RemoveDirectoryA
WaitForSingleObject
GetStartupInfoW
OpenProcess
VirtualAllocEx
SetEvent
CreateMutexA
GetEnvironmentVariableW
SetLastError
DeleteFileA
GetCommandLineW
GetStdHandle
FindClose
user32
FillRect
GetDC
MessageBoxA
DispatchMessageW
CallWindowProcW
GetWindowLongA
DispatchMessageW
GetSysColor
GetClassInfoA
PeekMessageA
FindWindowW
GetDC
GetDC
perfctrs
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kyccpqd Size: 4KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE