Static task
static1
Behavioral task
behavioral1
Sample
63c748fab24774c911ba0715761f9e149d260dadecbe111ce4fc37c28bbfa358.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
63c748fab24774c911ba0715761f9e149d260dadecbe111ce4fc37c28bbfa358.exe
Resource
win10v2004-20221111-en
General
-
Target
63c748fab24774c911ba0715761f9e149d260dadecbe111ce4fc37c28bbfa358
-
Size
193KB
-
MD5
086bef2b19cca35242350f3783a9162a
-
SHA1
97e537c033c31b916dd52ffc5281298bf47d205a
-
SHA256
63c748fab24774c911ba0715761f9e149d260dadecbe111ce4fc37c28bbfa358
-
SHA512
1a33e09877aeec09a1cfb3ac9e08f71073a4a7dd357584bd98e01c470fbf6f18937e13ac33362254de33931a1f322f81c17a657a34358f266ed7d3c30354457a
-
SSDEEP
3072:NgI9fZdv4xmpaxbJViDfKhnZfVoLFT2tyL8FTQ99YsbU/E6oVUwgM6Akl2ZZ:TrVsJkDfKhIV2MOTQnT+hS16hlE
Malware Config
Signatures
Files
-
63c748fab24774c911ba0715761f9e149d260dadecbe111ce4fc37c28bbfa358.exe windows x64
0bab5bed9e015d849ee6c99c90c1cae1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_ismbstrail
_copysign
_wfindfirsti64
__CppXcptFilter
ferror
__crtGetStringTypeW
puts
_mkdir
??0bad_cast@@QEAA@AEBV0@@Z
__fpecode
_tzset
putwc
_stricoll
_mbsnccnt
__iscsymf
??0exception@@QEAA@AEBV0@@Z
kernel32
OpenSemaphoreA
ReadConsoleOutputA
Process32Next
DuplicateHandle
SetLocalPrimaryComputerNameW
TryEnterCriticalSection
VirtualAlloc
GetConsoleAliasesLengthW
GetConsoleCommandHistoryA
EnumCalendarInfoExW
user32
GetClassInfoExW
GetInternalWindowPos
CopyRect
IsMenu
IsChild
IsCharAlphaNumericA
CopyIcon
GetUpdatedClipboardFormats
GetIconInfoExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Bi Size: 131KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qwsind Size: 54KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ