Static task
static1
Behavioral task
behavioral1
Sample
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe
Resource
win10v2004-20220812-en
General
-
Target
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556
-
Size
69KB
-
MD5
3e204ca172b28666a55411fa093729f0
-
SHA1
eca10cd236577c57dcfa853e0127b786e0e53f3b
-
SHA256
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556
-
SHA512
602f713f99bbc3a44d3f7861e8d411bbf0f9bc6b3813c1c434b784d0c93777406ba41c6e1f4ba70eb799f5ac614316ffb5c7b806286564fcda61d85f65b250e4
-
SSDEEP
1536:ZJk6w0lgaALGijbK4qiXcBc7fOwrcX+39:Zvg1yIDqXwcs
Malware Config
Signatures
Files
-
63cb19950de22e8df62147db79fc564a8d560e5c4c377c5988054d795f945556.exe windows x86
3a127cfd68bdd2228d2915d17b82f10a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
InterlockedDecrement
WriteFileEx
ExitProcess
lstrcpyW
VirtualAllocEx
GetModuleHandleW
lstrcmpA
FindResourceW
GetLongPathNameA
WaitForSingleObject
InterlockedIncrement
GetDiskFreeSpaceW
GetPrivateProfileIntA
LoadLibraryA
SetEnvironmentVariableA
Heap32First
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetExitCodeProcess
GetDiskFreeSpaceW
GetStringTypeW
GetACP
apphelp
ApphelpCheckIME
AllowPermLayer
SdbCreateMsiTransformFile
ApphelpCheckExe
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE