Static task
static1
Behavioral task
behavioral1
Sample
0563438a210e3f6a8aed20b4d2283c66fc5edf909a29ff6c43ba237c669b3046.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0563438a210e3f6a8aed20b4d2283c66fc5edf909a29ff6c43ba237c669b3046.exe
Resource
win10v2004-20221111-en
General
-
Target
0563438a210e3f6a8aed20b4d2283c66fc5edf909a29ff6c43ba237c669b3046
-
Size
306KB
-
MD5
1515b3d248d14b88f32b98c45661f620
-
SHA1
edca967b283b8d6dcf8b7b2e8ab7dbdca213821d
-
SHA256
0563438a210e3f6a8aed20b4d2283c66fc5edf909a29ff6c43ba237c669b3046
-
SHA512
e63063655822d9c430d92c910725af2c88b54d61cf637c5868e2faa9547327483d1bdaa9f3b1dcdc070c1c578ab90b0a06780d9c94bde19afb58df5154007e03
-
SSDEEP
6144:h6w3iXc/sfHjKAVsG5Ts7vUbSOb2R6qEg:x3oc/gDL5w7crODE
Malware Config
Signatures
Files
-
0563438a210e3f6a8aed20b4d2283c66fc5edf909a29ff6c43ba237c669b3046.exe windows x86
2512b6bf0a8c668c85f7cf7ab95a8e78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sleep
GetExitCodeProcess
CreateProcessA
SetFilePointer
UnhandledExceptionFilter
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetLastError
WriteFile
ReadFile
CloseHandle
SetHandleCount
GetCommandLineA
GetFileType
CompareStringW
CompareStringA
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
HeapReAlloc
SetEndOfFile
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
user32
MessageBoxA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gda Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE