Static task
static1
Behavioral task
behavioral1
Sample
c64ea8c03734e5d9b01e927292e2eeb93a0653fb191861e993043556f0a7b57a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c64ea8c03734e5d9b01e927292e2eeb93a0653fb191861e993043556f0a7b57a.exe
Resource
win10v2004-20221111-en
General
-
Target
c64ea8c03734e5d9b01e927292e2eeb93a0653fb191861e993043556f0a7b57a
-
Size
155KB
-
MD5
652335a078f4c5370524276f6ef46c05
-
SHA1
b4de2e53afeacc23a17addfbc6762ee6f81e0f44
-
SHA256
c64ea8c03734e5d9b01e927292e2eeb93a0653fb191861e993043556f0a7b57a
-
SHA512
6627684928dc32c5bdb793018c382c20b4921f9652afd9c75140f03957fd1a863b92ada9557db259bad81b112323884dfd0c21aad8ea3dd176f4958625b46320
-
SSDEEP
3072:awVyEIsN1xuXW/R1fDqqgn3gsWIYvlJMYVDhna:xVy1sN6infDRI7UPFpa
Malware Config
Signatures
Files
-
c64ea8c03734e5d9b01e927292e2eeb93a0653fb191861e993043556f0a7b57a.exe windows x86
40f3e433d238caaf3ba054436081dac8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
kernel32
CloseHandle
WriteFile
CreateFileA
CreateProcessA
CopyFileA
GetWindowsDirectoryA
UnhandledExceptionFilter
GetCurrentDirectoryA
SearchPathA
Sleep
RtlUnwind
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
AddVectoredExceptionHandler
user32
MessageBeep
MessageBoxA
ShowWindow
WindowFromDC
SendMessageA
SetActiveWindow
PaintDesktop
ScrollWindowEx
advapi32
RegOpenKeyA
RegCloseKey
RegSetValueExA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ