Static task
static1
Behavioral task
behavioral1
Sample
d06570d93967ecf50978ebdfb64460356b772700cc518c92875205b24e60af3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d06570d93967ecf50978ebdfb64460356b772700cc518c92875205b24e60af3c.exe
Resource
win10v2004-20221111-en
General
-
Target
d06570d93967ecf50978ebdfb64460356b772700cc518c92875205b24e60af3c
-
Size
416KB
-
MD5
6662472f42241be29236e07a54d7b060
-
SHA1
d677f28450a014940dcf439faf9510289008cc98
-
SHA256
d06570d93967ecf50978ebdfb64460356b772700cc518c92875205b24e60af3c
-
SHA512
72f3b80d77bace9c8e84774a96dc2b69f8a5dc5366033b430e84cc5bfa44440350625a2a5a8813522c328daa478c656243e60c343af5d812e68b888eaaaa91ab
-
SSDEEP
6144:+e2d1Usugxe1Bpf3C4aUg1GN+KwTD945FeR7Fji9pRU97t7wtRilOc:+eo6sJxe139an1Oe9eF6jKtQX
Malware Config
Signatures
Files
-
d06570d93967ecf50978ebdfb64460356b772700cc518c92875205b24e60af3c.exe windows x86
f6720d72771c608c48541bcb7006a036
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
VirtualFree
WriteFile
SetEvent
GetTickCount
GetProcAddress
GetLastError
CreateThread
CloseHandle
VirtualAlloc
InterlockedIncrement
GetModuleHandleA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
OutputDebugStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
FlushFileBuffers
user32
GetActiveWindow
LoadIconA
SetActiveWindow
SendInput
EnableWindow
ShowWindow
winmm
mciSendCommandA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 352KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ