Static task
static1
Behavioral task
behavioral1
Sample
57b1286ccbdef03494aebf52a45f50afc6a740bb6af3f546897fe7aa14c463f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57b1286ccbdef03494aebf52a45f50afc6a740bb6af3f546897fe7aa14c463f4.exe
Resource
win10v2004-20220812-en
General
-
Target
57b1286ccbdef03494aebf52a45f50afc6a740bb6af3f546897fe7aa14c463f4
-
Size
272KB
-
MD5
63d9825c741ec29971048c8019f767d8
-
SHA1
97f591b50ca86bbe798ed379b954f6cfc0f2e3fd
-
SHA256
57b1286ccbdef03494aebf52a45f50afc6a740bb6af3f546897fe7aa14c463f4
-
SHA512
a6d5f59aa85eb71c2e3759c50eeeae6f24f4ce6a72d8bb263ab8a966a8ecac63daa4881f2c8589f7de93004bc66989d0b15869e29f15b1b980e84317f52705af
-
SSDEEP
1536:eTpyCel+2xKIMgVXq1dCU4TzEP5KMvezYXD4:eVveg2xKxgV6nCbTzEP5KQs
Malware Config
Signatures
Files
-
57b1286ccbdef03494aebf52a45f50afc6a740bb6af3f546897fe7aa14c463f4.exe windows x86
6432b4c4b9ee9dfe031b215bbe111e7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetVersionExA
HeapReAlloc
GetCurrentThreadId
GetStartupInfoA
GetStartupInfoW
HeapReAlloc
GetCommandLineA
HeapAlloc
CreateThread
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetModuleHandleA
GetModuleHandleA
HeapReAlloc
LeaveCriticalSection
GetCurrentProcessId
GetVersionExA
WideCharToMultiByte
LoadLibraryA
Sleep
HeapFree
EnterCriticalSection
VirtualFree
LoadLibraryA
GetProcAddress
LoadLibraryA
SetLastError
GetProcAddress
GetVersionExA
lstrlenW
InterlockedDecrement
CreateFileW
CreateThread
ExitProcess
GetProcessHeap
GetCurrentThreadId
SetFilePointer
Sleep
WaitForSingleObject
GetModuleHandleA
CloseHandle
GetCurrentThreadId
VirtualFree
GetVersionExA
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE