Static task
static1
Behavioral task
behavioral1
Sample
64ca9e0e33635362542cc548ec6322474fc578c8f2a0c0a4011683f54ff5aa05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
64ca9e0e33635362542cc548ec6322474fc578c8f2a0c0a4011683f54ff5aa05.exe
Resource
win10v2004-20220812-en
General
-
Target
64ca9e0e33635362542cc548ec6322474fc578c8f2a0c0a4011683f54ff5aa05
-
Size
5.0MB
-
MD5
40156905b0a5d998091128d35e404d43
-
SHA1
40138ea1677b46f8da2b6b2594cf30ba669d7784
-
SHA256
64ca9e0e33635362542cc548ec6322474fc578c8f2a0c0a4011683f54ff5aa05
-
SHA512
fe906bcc055ff10435fd18e971bda8131fe55eaa1bdb3728c1fc25726e1be7136341c429824ab99440cc93a4815d477b18cfb29decfdad4f2989802422dfeaa0
-
SSDEEP
98304:GWDJ0P+6+88vVcGGTEkF5IZQsJGURNfVA4cKIIRJ:GWt02yEczEkXIZU8fVA4cXGJ
Malware Config
Signatures
Files
-
64ca9e0e33635362542cc548ec6322474fc578c8f2a0c0a4011683f54ff5aa05.exe windows x86
43c817fb8dc7c2bcc32dfd2e82c7cfd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeleteCriticalSection
WriteFile
FreeLibrary
GetStdHandle
MultiByteToWideChar
LCMapStringA
DeleteFileW
LocalAlloc
GetFileType
GetACP
SetHandleCount
GetVersionExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GlobalFree
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
LoadLibraryExW
TlsFree
GetCurrentThread
GetOEMCP
EnterCriticalSection
InterlockedExchange
GetStartupInfoA
lstrcmpiW
GetModuleHandleA
GetSystemInfo
GetFileAttributesW
GetVersionExW
TlsGetValue
UnmapViewOfFile
HeapCreate
ExitProcess
ReleaseMutex
VirtualFree
user32
UnregisterClassW
UnregisterClassA
GetMessageW
SetRect
GetDlgCtrlID
SetFocus
CopyRect
DefWindowProcA
SetCursor
IntersectRect
EnableMenuItem
CreateWindowExA
PostQuitMessage
GetSystemMetrics
SetWindowLongA
IsWindowVisible
LoadStringA
SetWindowPos
IsWindowEnabled
gdi32
CreateDCW
Ellipse
GetTextExtentPointW
CreateFontIndirectA
GetTextMetricsW
CreateRectRgnIndirect
advapi32
RegCloseKey
EqualSid
RegSetValueExW
AddAccessAllowedAce
LookupAccountNameW
CryptAcquireContextW
RegConnectRegistryW
RegDeleteValueW
CryptCreateHash
RegDeleteKeyA
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
crypt32
CertFreeCertificateContext
CertOpenStore
Sections
xtx Size: 4.4MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xdx Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xsx Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ