Static task
static1
Behavioral task
behavioral1
Sample
c63f3f196e5b484099470ddec9f2bd194f6da3f9bdd8e4b8013b4ded172b72a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c63f3f196e5b484099470ddec9f2bd194f6da3f9bdd8e4b8013b4ded172b72a1.exe
Resource
win10v2004-20220812-en
General
-
Target
c63f3f196e5b484099470ddec9f2bd194f6da3f9bdd8e4b8013b4ded172b72a1
-
Size
97KB
-
MD5
3a967f9b08a5a6b656584146018c63a8
-
SHA1
44816308cf854af1fe3422bafab0c90ec0330103
-
SHA256
c63f3f196e5b484099470ddec9f2bd194f6da3f9bdd8e4b8013b4ded172b72a1
-
SHA512
bb638b190af11bb6fc371bd0a6bbaabae96a60ff0e136167d9ccb12379966381cc3ddb7a9ab7bdd2ce25aff7efd47a0c6366d55af43ac2c644ffdd27715a9c43
-
SSDEEP
768:zqrm0LqeQS1LXAZXjDyuDJuXYP+1n2JGLwlS4sN1+x5kWYWW0h:zqT6ZXjDaXPn2JGIiHT
Malware Config
Signatures
Files
-
c63f3f196e5b484099470ddec9f2bd194f6da3f9bdd8e4b8013b4ded172b72a1.exe windows x86
7613f86dc1b42fe6fc7c5590329279c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
CreateIcon
kernel32
ExitThread
DeleteFileW
GetLastError
CompareStringA
CreateDirectoryA
GlobalFree
lstrcatA
FindClose
OpenFileMappingA
OpenFile
lstrcmpA
CopyFileExA
GetPriorityClass
DeleteFileA
GetCommandLineA
GetFileTime
ExitProcess
GetFileType
advapi32
RegOpenKeyExW
RegEnumValueA
Sections
.7741e Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.c1ag Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.408gc Size: 55KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.feg92 Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.89a4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ