Static task
static1
Behavioral task
behavioral1
Sample
f763f553e9816fdcdfd22619fb109cf63d86d08a1dcef0d1730c6dde140f270a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f763f553e9816fdcdfd22619fb109cf63d86d08a1dcef0d1730c6dde140f270a.exe
Resource
win10v2004-20221111-en
General
-
Target
f763f553e9816fdcdfd22619fb109cf63d86d08a1dcef0d1730c6dde140f270a
-
Size
716KB
-
MD5
e7c8e787315157811ce30c61a50555a4
-
SHA1
e3aa5fb7fc068b0730bf7e6a9b7a1dcbbbba910e
-
SHA256
f763f553e9816fdcdfd22619fb109cf63d86d08a1dcef0d1730c6dde140f270a
-
SHA512
1abac37df199727c21ec673193d38211d75f57c159ce2a137328667a04ee96a3b59cbfeef8ebac6146c37dc6540513f0248a242e749814e6cfb717800d41b6b8
-
SSDEEP
12288:fhZyeR6dj3Sn5hmTGn6N5zmplr4QFNrs:fnM9Om6o
Malware Config
Signatures
Files
-
f763f553e9816fdcdfd22619fb109cf63d86d08a1dcef0d1730c6dde140f270a.exe windows x86
0dceccb90c7d64324aa02bd95162ba5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
PostQuitMessage
kernel32
ExitProcess
LCMapStringA
GetStringTypeW
SetLastError
GetVersion
FindClose
CreateFileW
HeapCreate
CreateProcessA
TerminateProcess
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStringTypeA
WideCharToMultiByte
CompareStringW
GetCommandLineA
UnhandledExceptionFilter
GetCommandLineW
GetModuleFileNameA
GetVersionExA
GetEnvironmentStringsW
GetTickCount
QueryPerformanceCounter
SetEvent
ReleaseMutex
LCMapStringW
EnterCriticalSection
GetStdHandle
HeapFree
GetLastError
VirtualAlloc
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetProcAddress
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
VirtualFree
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE