Static task
static1
Behavioral task
behavioral1
Sample
63901ac71df7bbdc744b6ce516c199dc2848aeabb2dc0d4dcaa0289b6ad82573.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
63901ac71df7bbdc744b6ce516c199dc2848aeabb2dc0d4dcaa0289b6ad82573.exe
Resource
win10v2004-20220901-en
General
-
Target
63901ac71df7bbdc744b6ce516c199dc2848aeabb2dc0d4dcaa0289b6ad82573
-
Size
56KB
-
MD5
776907434e4e1fbc1c06a4cbeb2ed272
-
SHA1
71da35b7dc05332fdf7cf914bd400bd79e05b24c
-
SHA256
63901ac71df7bbdc744b6ce516c199dc2848aeabb2dc0d4dcaa0289b6ad82573
-
SHA512
e54827f4eaea94353e956fd0f23f1b2f2196c57e2486a3a0663e9e468d2547d1ae34ee6a82ceca766f6d021cca03498bae6d0681281bf1f2cd61211d6955ba85
-
SSDEEP
1536:9m05omiAUEyI6RL2slApBkOA7SawuD22LV4KJVNdwb:TPUEQbBOawj2LVB
Malware Config
Signatures
Files
-
63901ac71df7bbdc744b6ce516c199dc2848aeabb2dc0d4dcaa0289b6ad82573.exe windows x86
b0e1e4d6f4026e6d37d6dfffd3837705
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapCreate
GetPrivateProfileStringA
GetDriveTypeA
IsValidCodePage
lstrcmpiA
FileTimeToLocalFileTime
lstrcmpiA
GetBinaryTypeA
lstrcmpiA
lstrcatW
lstrcmpiA
TlsFree
GetLogicalDrives
SetLastError
lstrcmpiA
GetExitCodeProcess
GetTickCount
EndUpdateResourceA
CreateWaitableTimerW
CreateNamedPipeA
Sleep
GetStdHandle
ntmarta
AccFreeIndexArray
AccConvertAccessToSD
EventNameFree
EventGuidToName
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 607B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ