Static task
static1
Behavioral task
behavioral1
Sample
662cd563aa095dd5d57106d8ccd766e49e4775914876d543ddec3754a393ba0d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
662cd563aa095dd5d57106d8ccd766e49e4775914876d543ddec3754a393ba0d.exe
Resource
win10v2004-20220812-en
General
-
Target
662cd563aa095dd5d57106d8ccd766e49e4775914876d543ddec3754a393ba0d
-
Size
187KB
-
MD5
0a3eeae8cb806748a24049d8904e29b0
-
SHA1
fb4faedb0820a8ec4f68cadf33da941f89e9d5df
-
SHA256
662cd563aa095dd5d57106d8ccd766e49e4775914876d543ddec3754a393ba0d
-
SHA512
747e6144c7fdbf3528c3dcdfe9e291cb006f7553f116425d1d7d92185065f18fce81fb13f1d72d65d4fdfb8440261da6b20d7aac4910c9fd247808296e0faacf
-
SSDEEP
3072:MTt9eQH4RIgzx1hMUGXJzxv2O5olUf2GQvGZ+6p3f/f0Sb:MeIgz9tGXJ52OJ3Qvi+83PT
Malware Config
Signatures
Files
-
662cd563aa095dd5d57106d8ccd766e49e4775914876d543ddec3754a393ba0d.exe windows x86
aa013e3c21851be1d73bd89f2f28ab21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAddExtensionW
user32
FindWindowA
GetDC
GetDesktopWindow
GetWindow
ReleaseDC
kernel32
CloseHandle
CreateFileA
CreateMutexW
EnumSystemLocalesA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTempPathA
GetTickCount
GetVersionExA
HeapCreate
HeapDestroy
HeapFree
LCMapStringA
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
lstrcpyW
lstrlenA
LCMapStringW
Sections
AUTO Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ