Static task
static1
Behavioral task
behavioral1
Sample
f568de6abe2df19dfbf2e42ae993f7015a6cb3497745d93b7e1058c3c9003518.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f568de6abe2df19dfbf2e42ae993f7015a6cb3497745d93b7e1058c3c9003518.exe
Resource
win10v2004-20221111-en
General
-
Target
f568de6abe2df19dfbf2e42ae993f7015a6cb3497745d93b7e1058c3c9003518
-
Size
162KB
-
MD5
1566cdefb7a1979c645722a996d86da7
-
SHA1
66e9689a5fc0b8463a0e8320367e72bff3f635f3
-
SHA256
f568de6abe2df19dfbf2e42ae993f7015a6cb3497745d93b7e1058c3c9003518
-
SHA512
188252cc4e04b1b88a94190950cdd16b86bf6694da77b9c529016038311223997b63e0a59eeb09d48e81128513a5636311c6606c8c6a6a2de103064d77589ad1
-
SSDEEP
3072:6+x8cBUnNaToiPCdxlK4KI4C5ro5mHFhykrgsq/vqxNwwOZN:B8cWnNa8i6dxlR0sq/iq
Malware Config
Signatures
Files
-
f568de6abe2df19dfbf2e42ae993f7015a6cb3497745d93b7e1058c3c9003518.exe windows x86
2b75000483f4d171a0f922fdf81de1b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
FreeEnvironmentStringsW
InitializeCriticalSection
lstrcpynA
GetDiskFreeSpaceA
AddAtomA
SetFilePointer
LoadLibraryA
CreateFileA
GetModuleHandleA
VirtualProtect
FlushFileBuffers
lstrlenA
FreeEnvironmentStringsA
FindFirstFileA
SetStdHandle
MulDiv
GetFileAttributesA
GetProcAddress
lstrcmpA
GetLastError
FreeLibrary
WriteFile
GetThreadLocale
EnumResourceNamesW
GetCurrentThreadId
Sleep
IsBadReadPtr
GetFullPathNameA
lstrcmpiA
GetOEMCP
EnterCriticalSection
UnhandledExceptionFilter
GetStringTypeA
lstrcatA
lstrlenA
CloseHandle
GetStringTypeW
DeleteCriticalSection
lstrcpyA
LeaveCriticalSection
IsBadCodePtr
LCMapStringA
WideCharToMultiByte
GetTickCount
MultiByteToWideChar
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
GetEnvironmentStrings
ReadFile
GetEnvironmentStringsW
RaiseException
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 84KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ