Static task
static1
Behavioral task
behavioral1
Sample
966adc60490b338317e87c6a0ae0fb65157bc1eb5823ff0a28652772ea80abd1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
966adc60490b338317e87c6a0ae0fb65157bc1eb5823ff0a28652772ea80abd1.exe
Resource
win10v2004-20220812-en
General
-
Target
966adc60490b338317e87c6a0ae0fb65157bc1eb5823ff0a28652772ea80abd1
-
Size
40KB
-
MD5
3f5402257827dacf6469c292dd94ce68
-
SHA1
01a6f25ab077cffb7a44157aece6354eec03d086
-
SHA256
966adc60490b338317e87c6a0ae0fb65157bc1eb5823ff0a28652772ea80abd1
-
SHA512
3e849a17eec7d7253623e9ee17d62e4838932c527bd8c7e745cee8e7438fbc8c4e9e48482144c1fd123c4443392b9f18285486aeec3e1614861674f28232fa84
-
SSDEEP
768:bzr2M1fSDp1XIulR4bYMw3R+lLpbuPbGUIDJ3g+ebH0j0:PB1fsr4qGbYMxuzGUaw+ebUY
Malware Config
Signatures
Files
-
966adc60490b338317e87c6a0ae0fb65157bc1eb5823ff0a28652772ea80abd1.exe windows x86
173fd6c53a16c7da012be13c62871cdd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileMappingA
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExpandEnvironmentStringsA
FindNextFileA
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsA
GetFileAttributesA
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetPrivateProfileSectionA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStdHandle
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalAlloc
GlobalHandle
GlobalReAlloc
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
InterlockedIncrement
IsDebuggerPresent
LoadLibraryA
LoadLibraryExA
LocalAlloc
QueryPerformanceCounter
ReadFile
ReadProcessMemory
ResetEvent
SetPriorityClass
SizeofResource
SystemTimeToFileTime
TlsAlloc
VirtualAlloc
WriteFile
lstrcatA
lstrcmpA
user32
EqualRect
PtInRect
ReleaseDC
SendMessageA
advapi32
RegEnumKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
SetServiceStatus
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ