Static task
static1
Behavioral task
behavioral1
Sample
11e65a2f4153ae70dfc55481f3df6598d85ed6d95c9c2b9507b868c4195fe5c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
11e65a2f4153ae70dfc55481f3df6598d85ed6d95c9c2b9507b868c4195fe5c5.exe
Resource
win10v2004-20220812-en
General
-
Target
11e65a2f4153ae70dfc55481f3df6598d85ed6d95c9c2b9507b868c4195fe5c5
-
Size
5.7MB
-
MD5
3cd1ec856b9878ff37a9bda0e2d8f391
-
SHA1
52564a29e47855792a67cd40c4a12e9fa37a6df3
-
SHA256
11e65a2f4153ae70dfc55481f3df6598d85ed6d95c9c2b9507b868c4195fe5c5
-
SHA512
7ffddd83c21808fbf4110f41aebaf2f8546a057fe7650095197541ff36da02c38a0ee3aabc740a526accef700e9f110fc96c12834b365e5e1e3886f34865973f
-
SSDEEP
98304:dPYv1Ty5gMf1Sn83/5AevHfPKSRP3ar7wlkmdm3ZrHq+OnDk4:iJO11ea/5n3Pdxs+kmdmZqg4
Malware Config
Signatures
Files
-
11e65a2f4153ae70dfc55481f3df6598d85ed6d95c9c2b9507b868c4195fe5c5.exe windows x86
ccd15352200307663e688910918849fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SleepEx
GetProcAddress
GetLastError
Sleep
VirtualProtectEx
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetStringTypeW
user32
GetMessageA
DispatchMessageA
GetDesktopWindow
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LYXNJ Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ