Static task
static1
Behavioral task
behavioral1
Sample
63e13f06de97fd0a5833d3db30e94f2f155ffdf0efd9b8c2562f5a1bcef92404.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63e13f06de97fd0a5833d3db30e94f2f155ffdf0efd9b8c2562f5a1bcef92404.exe
Resource
win10v2004-20221111-en
General
-
Target
63e13f06de97fd0a5833d3db30e94f2f155ffdf0efd9b8c2562f5a1bcef92404
-
Size
77KB
-
MD5
793768de27352bb99b0d52d367e09dc2
-
SHA1
343bed497f5906fad087d4e80658acdfa2a97d7b
-
SHA256
63e13f06de97fd0a5833d3db30e94f2f155ffdf0efd9b8c2562f5a1bcef92404
-
SHA512
2944522f16b4364b0dc6401bbe741ef3841e3ab500dc92107001b374b78b62b58983ae5a24ad49c37e3ddbf6b3f3d691236e6451537f1de10419f2d8b5af2cd4
-
SSDEEP
1536:buZTWF5eUgCk1L7qCeyjDx5kM+xAXJkIy5fQZBzbOUNOCYEOGMwHRu:aZ6F0UMSFyvhXJbiI1NwELMw8
Malware Config
Signatures
Files
-
63e13f06de97fd0a5833d3db30e94f2f155ffdf0efd9b8c2562f5a1bcef92404.exe windows x86
c22ea1ee3a19dc584ff47584d2a03418
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
lstrcmpA
GetModuleFileNameA
SetPriorityClass
GetCurrentProcess
WriteFile
CreateFileA
LockResource
LoadResource
Sleep
CopyFileA
GetSystemTime
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
lstrlenA
GetSystemDirectoryA
GetVersionExA
CreateProcessA
CloseHandle
FindResourceA
TerminateProcess
user32
wsprintfA
advapi32
RegFlushKey
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyA
ws2_32
send
connect
htons
inet_addr
gethostbyname
socket
accept
inet_ntoa
recv
bind
htonl
WSAGetLastError
__WSAFDIsSet
ioctlsocket
select
WSAStartup
closesocket
listen
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rlsdysq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE