Static task
static1
Behavioral task
behavioral1
Sample
64fb467fea7640c3db049c809ec6485c9d40d653df32c882f1af1bb866f8a2ef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
64fb467fea7640c3db049c809ec6485c9d40d653df32c882f1af1bb866f8a2ef.exe
Resource
win10v2004-20221111-en
General
-
Target
64fb467fea7640c3db049c809ec6485c9d40d653df32c882f1af1bb866f8a2ef
-
Size
292KB
-
MD5
d11bb343254bc22bd35469a019e26345
-
SHA1
b89868bc81b365b08b4f279b1f7d390bbc20ec34
-
SHA256
64fb467fea7640c3db049c809ec6485c9d40d653df32c882f1af1bb866f8a2ef
-
SHA512
d53abfedd61e06c50bd8b1dc1bd7f0bbd49e571f58d6804985ab49860a26ba3be965da28ebf90e5abec9da71456a9d9a50aef6319f7d6f07f2be05a96c2cbf49
-
SSDEEP
6144:mRcYmcJqh3FPRfNtzLiVRbgdxui9tfmON:jYvJqh3FdNxLiTgjuEteON
Malware Config
Signatures
Files
-
64fb467fea7640c3db049c809ec6485c9d40d653df32c882f1af1bb866f8a2ef.exe windows x86
61e78e2c444a863d8ed96d8f50753914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetLastError
SetTapePosition
SetLocaleInfoA
UnregisterWait
GetDevicePowerState
InterlockedCompareExchange
msvcrt
memset
memcpy
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qwsx Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE