Static task
static1
Behavioral task
behavioral1
Sample
65a2a315351933313a151e537e66d23aeb1a9e2528c3d1a07722c375a62e3d76.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
65a2a315351933313a151e537e66d23aeb1a9e2528c3d1a07722c375a62e3d76.exe
Resource
win10v2004-20220812-en
General
-
Target
65a2a315351933313a151e537e66d23aeb1a9e2528c3d1a07722c375a62e3d76
-
Size
768KB
-
MD5
f9fcee40604662aebe2b82bf7f80b535
-
SHA1
6a10cc570d8a4f0ebd36db88d5982ef3fbe38949
-
SHA256
65a2a315351933313a151e537e66d23aeb1a9e2528c3d1a07722c375a62e3d76
-
SHA512
d643c32799485217914a909e84f8e380fb2a87e9f6fc4e440e37c15158d1a8d012ed37201605fef5f7c83999ac3530ae9cbcfcf929f5a953ce388ea7a6c36902
-
SSDEEP
12288:kGt+fA3h2W2OAyxBJSH9YHkfRSzMBHH2gWRkPF+C4lcgE+L:kGxAWNT49YEfRSGa6+u
Malware Config
Signatures
Files
-
65a2a315351933313a151e537e66d23aeb1a9e2528c3d1a07722c375a62e3d76.exe windows x86
4d54128cd1457b70004439665cff1583
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
HeapSize
SetLastError
CreateMutexW
GetLocalTime
Sleep
GetStdHandle
GetProcessHeap
LoadLibraryA
GlobalFree
CreateSemaphoreA
CreateHardLinkW
DeleteFileW
ReadConsoleW
GetPriorityClass
GetStartupInfoA
SetLastError
VirtualProtect
GetFileAttributesA
GetTickCount
CreateDirectoryW
wintrust
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcAddFlow
TcAddFilter
TcDeleteFlow
TcDeleteFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE