Static task
static1
Behavioral task
behavioral1
Sample
c651d68f6b2213318e149c5d25816c19886a15775043ed200d27a457ad7d30d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c651d68f6b2213318e149c5d25816c19886a15775043ed200d27a457ad7d30d3.exe
Resource
win10v2004-20221111-en
General
-
Target
c651d68f6b2213318e149c5d25816c19886a15775043ed200d27a457ad7d30d3
-
Size
762KB
-
MD5
fbfd83fcb8ac23d4e53d60e5dfca3339
-
SHA1
a3f69ea76c7318c4a0f77f6a16572d47feea1c79
-
SHA256
c651d68f6b2213318e149c5d25816c19886a15775043ed200d27a457ad7d30d3
-
SHA512
827afc20dbd4cbf38a555e4e002af310758faddeb0ca6f753f868e1cd250216485b1691c6322f26f571ba0ad90bace77913ba2f7de204a65cf61ed3e54436748
-
SSDEEP
12288:jhY1RqJQP167CUkvlPPBw5xQ+5lUEz1NKD5ylSsrt+gVbglnJalRr8tErV5b:jhYrm0t1l3Bw5xpHUEfK8Rt/glnwlN8o
Malware Config
Signatures
Files
-
c651d68f6b2213318e149c5d25816c19886a15775043ed200d27a457ad7d30d3.exe windows x86
0422d941ba17fa366ed26cfda7a22727
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
HeapDestroy
CancelIo
GetEnvironmentVariableA
GetCommandLineA
GetVolumePathNameA
Sleep
GetModuleHandleA
CloseHandle
DeleteFileW
FindResourceW
VirtualQuery
TlsGetValue
HeapCreate
ResetEvent
lstrlenA
CloseHandle
GetStartupInfoA
GetCommandLineA
GetTimeFormatA
user32
PeekMessageA
DispatchMessageA
DestroyMenu
IsZoomed
CallWindowProcA
DispatchMessageA
CreateIcon
GetWindowLongA
GetSysColor
FindWindowA
DrawTextW
IsWindow
GetClassInfoA
psbase
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 754KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ