Static task
static1
Behavioral task
behavioral1
Sample
6365418b53f3650a9989bff9a593a58884ed31b0f24817142b29e1693d5e1993.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6365418b53f3650a9989bff9a593a58884ed31b0f24817142b29e1693d5e1993.exe
Resource
win10v2004-20221111-en
General
-
Target
6365418b53f3650a9989bff9a593a58884ed31b0f24817142b29e1693d5e1993
-
Size
272KB
-
MD5
9958fd958661dc598dc4606abd462f47
-
SHA1
6668ffa34b87710f55da9aced730bc48d49b6bbf
-
SHA256
6365418b53f3650a9989bff9a593a58884ed31b0f24817142b29e1693d5e1993
-
SHA512
57f07e1dc3a4c24c0f086d7d40f08c17fc3a34bd778d31e383ab70538d4d7b7371819033b2a0e0a531714e137f072b159972d07a1908e52a67d89a56d0d340fb
-
SSDEEP
6144:t0bATIytwT59CfTe/N+YcRCSnuZ0+QHstwhn2HUrCOE:t0fy89Cq/UY9ZSOwh2HzOE
Malware Config
Signatures
Files
-
6365418b53f3650a9989bff9a593a58884ed31b0f24817142b29e1693d5e1993.exe windows x86
a11ef335e186f928914164cff0210ac5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIcosh
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ